Report a vulnerability

Found a security issue in Edgaze? Tell us privately. Your report goes only to our security team.

The issue

Title

One line, like you'd name a ticket.

Type

Affected URL, endpoint or feature

How severe do you think it is?

Your best guess is fine. We'll assess it ourselves.

Don't include other people's real data. Use your own test accounts.

What's the vulnerability?

Steps to reproduce or proof of concept

Requests, payloads and the exact order of steps.

ImpactOptional

What could an attacker do with this?

EvidenceOptional

Drop files here

Screenshots, video, text or PDF, up to 5 files, 20 MB each

So we can ask questions and tell you when it's fixed.

NameOptional

Credit asOptional

If you'd like a thank-you by name.

In scope.: Edgaze web pages, APIs, sign-in, checkout, creator tools and hosted workflow runs.
Good-faith testing.: Use only your own accounts and data, stop once you can show the issue, and keep it private while we fix it.
Not allowed.: Denial of service, automated scanning, social engineering, or touching other people’s accounts or data.

I followed the responsible disclosure policy and will keep this private until Edgaze confirms a fix.

Encrypted in transit. Only the security team can read it.