Help us keep base31 safe.

Report privately

Please do not open a public issue for a vulnerability. Email security@base31.org with the affected URL, impact, reproduction steps, and any safe proof of concept.

Response process

We will acknowledge reports, validate the issue, and keep you informed as we work toward a fix. Reports involving user data, credentials, or active exploitation may be prioritized.

Responsible testing

Do not access, change, or delete data that does not belong to you. Stop testing once a vulnerability is confirmed and keep details private until remediation is complete.

Scope

This policy covers base31.org and its first-party services. Third-party sites listed in the directory are independently operated and should be reported to their owners.

The full policy is also available in the repository as SECURITY.md.