Vulnerability disclosure

RedTeamDaily is a security news service, so we take reports about our own security seriously. Thank you for helping.

How to report

Email hello@redteamdaily.com with "Security" in the subject. Include what you found, where (URL or app screen), the steps to reproduce it, and what an attacker could do with it. Please don't include personal data you came across.

We reply within 3 working days, keep you updated, and tell you when it is fixed. We are happy to credit you on our Corrections page if you want.

What is in scope

• The RedTeamDaily website (redteamdaily.com) and its public API (api.redteamdaily.com)
• The RedTeamDaily iPhone and Android apps

Please don't

• Access, change or delete data that isn't yours; stop and tell us as soon as you see someone else's data.
• Run denial-of-service tests, flood forms or the Ask AI feature, or send spam through our email.
• Use social engineering on our staff or readers, or physical attacks.
• Test the other websites that share our server: they are not ours.

Our promise

If you follow this policy and act in good faith, we will not take legal action against you or ask anyone else to, and we will work with you to understand and fix the problem quickly. This is not a paid bug bounty.