At Captain Droid, we take the security of our platform and users seriously. We value the work of security researchers who help make the internet safer. If you discover a vulnerability in our website, infrastructure, or services, we encourage you to report it to us responsibly.

🛡️ How to Report a Vulnerability

If you believe you have found a security issue, please contact us at:

[email protected]

Please include as many details as possible, such as:

  • Steps to reproduce the issue
  • Affected URLs or endpoints
  • Expected vs actual behavior
  • Any relevant screenshots, logs, or PoC

We will review your report and respond as quickly as possible.

🤝 Guidelines for Responsible Research

To protect our users and infrastructure, we ask researchers to follow these rules:

  • Do not exploit the vulnerability beyond what is necessary to prove it exists.
  • Do not attempt to access, modify, or delete data.
  • Do not conduct actions that degrade service availability (e.g., DoS, brute force).
  • Do not publish details before we have resolved the issue.
  • Do not use automated scanners that may harm performance.

🔒 What You Can Expect From Us

When you report a vulnerability responsibly, we commit to:

  • Acknowledging your report within a reasonable time
  • Keeping you informed about our progress
  • Not taking legal action against good-faith security research
  • Listing your name (optional) in our Security Hall of Fame as gratitude

Your help improves the safety and reliability of Captain Droid for millions of users.

Thank you for keeping our community secure!