Vulnerability disclosure
Last updated November 12, 2026
Reporting a vulnerability
If you believe you've found a security vulnerability in mindflayer.com, please email security@mindflayer.com with a description, the steps to reproduce it and its potential impact. Our security.txt lists the same contact.
What to expect
We aim to acknowledge reports within three business days, keep you informed while we investigate, and credit you once it's fixed if you'd like. We don't currently offer a paid bug bounty.
Guidelines
Test only against mindflayer.com and its subdomains. Don't access, change or delete data that isn't yours. Don't run denial-of-service, spam or social-engineering tests, and don't test against our clients or third-party providers. Give us reasonable time to fix an issue before disclosing it publicly.
Safe harbor
We won't pursue legal action against anyone who reports a vulnerability in good faith and follows these guidelines.