Report Security Concerns
Found something suspicious? We want to hear about it.
Security is a Team Effort
No system is perfect—not even ours. That's why we rely on security researchers, ethical hackers, and observant users like you to help us find and fix issues before they become problems.
If you've discovered a vulnerability in Boti, we genuinely appreciate you taking the time to report it responsibly.
How to Report
Email Us Directly
Send your findings to
Include Details
Help us understand and reproduce the issue. Include steps to reproduce, affected URLs, screenshots, or proof-of-concept code if you have it.
Give Us Time
Please allow us reasonable time to investigate and fix the issue before disclosing it publicly. We move fast, but some fixes take time to do right.
What to Include in Your Report
Description
Clear explanation of the vulnerability and its potential impact.
Steps to Reproduce
Detailed steps so we can verify and fix the issue quickly.
Evidence
Screenshots, videos, logs, or proof-of-concept code that demonstrates the issue.
Impact Assessment
Your evaluation of the seriousness and possible effects on users.
What Happens Next
We confirm receipt of your report within 48 hours.
Our team investigates and assesses the severity
We keep you updated on our progress
We resolve the issue and inform affected users if needed.
We will credit you (if you wish) once the fix is implemented.
What's Not in Scope
To assist us in concentrating on genuine threats, kindly refrain from reporting:
- •Social engineering attacks (phishing, pretexting)
- •Physical attacks on our infrastructure
- •Denial of service (DoS) attacks
- •Spam or content issues (use Report Abuse instead)
- •Missing security headers that don't result in exploitation
- •Issues in third-party services we don't control
Safe Harbor
We believe in responsible disclosure. If you act in good faith and follow these guidelines, we commit to:
- Not pursue legal action against you
- Work with you to understand and resolve the issue
- Recognize your contribution (with your permission)
Ready to Report?
We appreciate your assistance in maintaining the security of Boti.
Looking for general security information? Visit our Security page to learn how we safeguard your information.