Vulnerability disclosure

If you find a security issue in getenumerated.com, tell us. We welcome good-faith security research and want to hear from you.

Report to

simel@getenumerated.com. Include the affected URL or system, steps to reproduce, and the impact you observed.

In scope

getenumerated.com and its subdomains.

Out of scope

Third-party services we link to, such as Cal.com and Zenodo. Denial of service, social engineering, and physical testing.

What happens next

Every report is read by a person. We will reply once we have assessed it, and we will credit you when a fix ships if you want to be named.

What we ask

Test only what is needed to show the issue. Don't access, change or keep data that isn't yours, and don't disrupt the service. Give us a reasonable chance to fix the issue before you share it publicly.

Machine-readable contact: /.well-known/security.txt