Security

We take the security of our apps seriously. If you believe you've found a vulnerability in an Integration Yard app, please report it privately.

How to report

Email [email protected] with a description, steps to reproduce, affected app and version, and potential impact. We aim to acknowledge reports within 2 business days and will keep you updated on the fix.

Guidelines

• Test only against your own Jira sites and Sentry organizations.
• Don't access, modify or delete other users' data, and don't degrade service.
• Give us reasonable time to fix the issue before public disclosure.

We don't currently run a paid bug bounty, but we're glad to credit researchers who report responsibly. A machine-readable contact is at /.well-known/security.txt.