Security

How to report a vulnerability in a Woodland Howl site or app.

How to report

Use the support form and choose the category Security issue.

What to include

What not to include

Leave out tenant names, tokens, credentials and personal data.

What happens next

You'll get an acknowledgement within 5 business days. Please allow time for a fix before you disclose the issue publicly.

Scope

This covers the Woodland Howl sites and apps. It does not cover Microsoft, Google, Cloudflare or other third-party services; report issues with those to the company that runs them.

No bounty

There is no bug bounty.