We welcome reports from security researchers and users. If you found something, tell us before anyone else — we do not pursue legal action against good-faith research that respects user privacy and avoids service degradation.
How to report
- 1
Email security@monster5stars.dev (also listed in our security.txt).
- 2
Include reproduction steps, affected URLs, and your assessment of impact.
- 3
We triage within 72 hours and keep you updated at every step.
Use case
You found a security issue
- Goal
- Report it responsibly and get acknowledgment.
- Scenario
- You noticed something odd while using the product.
Steps
- 1Do not test against other users' accounts or data.
- 2Write down exact reproduction steps.
- 3Send them to the security contact.
- 4Wait for triage before any public disclosure.
Outcome
The issue is fixed, you are credited, users stay safe.