Security
Report a vulnerability
If you believe you have found a security issue in STORMY, including the STORMY Slack app, tell us privately and we will work with you to fix it.
Security email
founders@stormy.aiReports go straight to the founders. We confirm we received yours, keep you updated while we fix it, and tell you when it is resolved.
Please include
- What you found and where: the page, endpoint or Slack interaction.
- Steps to reproduce it, and what an attacker could do with it.
- Any account, workspace or request ids involved, so we can trace it.
Good-faith research
We will not pursue anyone who reports in good faith, avoids privacy violations and service disruption, uses only accounts and workspaces they own, and gives us reasonable time to fix the issue before disclosing it. Do not access, change or delete other people's data, and do not send messages to people who did not agree to take part.