TempoLock welcomes responsible reports of suspected security vulnerabilities.
How to report a vulnerability
Email support@tempolock.app with the subject Security vulnerability, or open TempoLock and choose Report a problem → Security vulnerability. Include what you observed, affected page/feature, reproduction steps and likely impact. Do not include passwords, access tokens or other users' personal data unless strictly necessary to explain the issue.
Responsible testing
- Do not access, alter, download or delete data that does not belong to you.
- Do not disrupt the service, perform denial-of-service testing, send malware or use social engineering.
- Use test/guest accounts where possible and stop once you have enough evidence to report the issue.
- Do not publicly disclose an unresolved vulnerability before TempoLock has had a reasonable opportunity to investigate.
What happens next
Reports are reviewed and prioritised based on reproducibility and potential impact. TempoLock cannot promise a specific response or reward, but good-faith reports are appreciated.