How to report an issue
Use the support form and select the security topic. Include the affected URL or feature, reproduction steps, potential impact and any non-sensitive evidence that helps us investigate. Do not send passwords, API keys, personal data or exploit payloads that are unnecessary to explain the issue.
Safe research boundaries
Test only accounts, data and targets you own or are authorized to use. Do not disrupt availability, access another user's data, evade rate limits, use social engineering, maintain persistence, exfiltrate data or test third-party services through MemonaIQ. Stop testing when you have enough evidence to describe the issue.
What to expect
We will review reports made in good faith and may ask for clarification. MemonaIQ is an unregistered technical-preview platform and does not currently operate a paid bug bounty. Response and remediation times depend on severity, reproducibility and the availability of a safe fix.
Coordinated disclosure
Give us a reasonable opportunity to investigate and remediate a confirmed issue before public disclosure. We will not request concealment of unresolved risks indefinitely. This policy does not authorize activity that violates applicable law, third-party rights or the MemonaIQ Acceptable Use Policy.
Independent security checks
You can review MemonaIQ using the independent Internet.nl website test and MDN HTTP Observatory. These third-party results are point-in-time technical assessments, not MemonaIQ certifications or guarantees.
Results can change as the website, hosting platform and assessment criteria evolve. Refer to each service for its current findings and methodology.
Questions about this document?
Get in touch and we will help you find the answer.