Responsible Disclosure Policy
Last updated: October 16, 2026
We value the work of security researchers. If you believe you have found a vulnerability in DialedTint, please report it to us so we can fix it before it affects anyone.
Scope
- The DialedTint web application and its public pages (proposals, invoices, documents, lead forms and review pages).
- Out of scope: third-party services we use, social engineering, physical attacks and denial-of-service testing.
Guidelines
- Only test with accounts and data you own or are authorized to use.
- Do not access, change or delete other businesses' data. If you reach someone else's data by accident, stop and report it.
- Do not run automated scans that degrade the Service or send messages to real customers.
- Give us reasonable time to fix the issue before sharing details publicly.
What to include
- A description of the issue and its potential impact.
- Step-by-step instructions to reproduce it, with the affected pages or requests.
- Any screenshots or proof of concept, without real customer data.
Our commitment
We will acknowledge valid reports, keep you informed about the fix and will not take legal action against research done in good faith under this policy. We do not run a paid bug bounty at this time.
How to report
Contact details for these requests will be published on this page soon. Until then, write to us from inside the app once support is available.