Please do
- use test accounts you control;
- minimize access to real user data;
- stop if testing risks service disruption;
- give us reasonable time to investigate before public disclosure.
SECURITY
Security & responsible disclosure
Report a security issue
If you believe you found a vulnerability in DiscoverGraph itself, please report it privately through the contact form. Include enough detail to reproduce the issue without including unnecessary secrets or personal data.
Please do not
- perform denial-of-service or high-volume testing;
- access, modify or delete data belonging to other users;
- use social engineering, credential attacks or destructive payloads;
- test unrelated third-party sites through DiscoverGraph without authorization.
No bug bounty promise
The public beta does not currently promise financial rewards. Responsible reports are appreciated and will be prioritized according to severity and reproducibility.