Responsible reporting
Report a security issue
Help us investigate a potential WorthNow vulnerability while protecting users and sensitive information.
Please do not send sensitive data
Do not include passwords, bank credentials, access tokens, full account numbers, or unnecessary personal or financial data. Use a minimal proof of concept and redact identifiers. If you believe sensitive material is essential, ask us for a safer transfer method first.
Responsible reporting
- Act in good faith and avoid accessing, changing, retaining, or sharing other people’s information.
- Do not disrupt the service, use social engineering, or perform denial-of-service testing.
- Give us a reasonable opportunity to investigate and address the issue before public disclosure.
- Tell us how to contact you and whether you want to be credited.
What to expect
We aim to acknowledge a credible report and keep reporters informed as we investigate. Response targets will be formalized before public launch. WorthNow does not currently advertise or operate a formal bug bounty program, and we cannot promise payment.