Report a vulnerability

How to report a vulnerability

• Send a report to info@jahresabschluss.io with the subject Security report StatutoryAccounts.io: the URL or feature affected, when you saw it, how to reproduce it with your own test data and what could be affected.
• Keep evidence to what is needed. Do not send personal data, client financial data, passwords, session cookies or API keys.
• Keep testing limited. Use only accounts and data you are permitted to use, stop as soon as you can show the problem, and do not run disruptive tests or phishing.
• Agree next steps in the same email thread, including any public write-up.

For ordinary questions there is the contact page. The contact details are also in security.txt; more about security is on Security and privacy. The full policy is on this page.