Responsible Disclosure

As we're concerned by security, your input and feedback is really appreciated, especially if you've found a vulnerability in PullReview. We'll interact with you in order to understand your report and check if we fully address your concern.

Please email us to [email protected]; we'll consider it with our highest priority. If possible please encrypt your message with our GPG key.

During your disclosure, we ask you to:

• Inform us as soon as possible.
• Test against fake data and account and respect our user's privacy and data: act in good faith towards them.
• Work with us to fix the security issue before publicly disclosing it.