Report a security vulnerability

Security Reporting

Found a potential security vulnerability in Dreamsquare? We appreciate responsible disclosure and take every report seriously.

How to report

Send an email to [email protected] with:

• A description of the vulnerability and where you found it.
• Steps to reproduce the issue (the more detail, the better).
• Your contact information so we can follow up.

What to expect

• We'll acknowledge your report within 48 hours.
• Our security team will investigate and keep you informed of progress.
• If the vulnerability is confirmed, we'll work on a fix and credit you in our security acknowledgements (if you'd like).

Guidelines

• Do not access, modify, or delete other users' data.
• Do not publicly disclose the vulnerability before we've had a chance to address it.
• Do not use automated scanning tools in a way that impacts service availability.

We're grateful for the security research community's help in keeping Dreamsquare safe for all dreamers.