Security research
Report vulnerabilities responsibly.
Help protect AppemUp users by reporting security issues privately and allowing time for investigation.
How to report
Email security@app-em-up.com with a concise description, affected route or component, reproduction steps, impact, and a safe proof of concept. Do not include unrelated personal data or active credentials.
Research boundaries
Do not access data belonging to another user, disrupt service, run denial-of-service tests, use social engineering, upload malware, or publicly disclose an unresolved issue.
Our response
During private beta, AppemUp aims to acknowledge credible reports within five business days, investigate based on severity, and provide status updates when practical. This is not a bug-bounty commitment.
Immediate exposure
If you discover exposed credentials or active exploitation, state that clearly in the subject line and stop testing after preserving the minimum evidence needed to explain the issue.