Security
We take the security of Manager Toolkit and our users' data seriously. If you believe you've found a security vulnerability, we encourage you to let us know responsibly.
Responsible disclosure
If you discover a security vulnerability in Manager Toolkit, please report it to us privately so we can address it before it is publicly disclosed. We appreciate your help in keeping our platform and users safe.
Please submit your findings via our contact form, selecting Responsible Disclosure (Security) as the subject.
Go to contact formWhat to include in your report
- A clear description of the vulnerability and its potential impact
- Steps to reproduce the issue
- Any relevant URLs, screenshots, or proof-of-concept code
- Your contact details so we can follow up if needed
What we ask
- Do not access, modify, or delete other users' data
- Do not publicly disclose the vulnerability before we've had a reasonable opportunity to fix it
- Do not perform denial-of-service attacks or degrade the service for other users
- Act in good faith to avoid privacy violations and disruption to others
Bug bounty
We do not currently offer a paid bug bounty programme. However, we genuinely appreciate responsible disclosures and will acknowledge your contribution. We aim to respond to all reports within 48 hours and will keep you updated as we investigate and resolve the issue.