Security
Report a vulnerability in the API, its documentation or the Customer portal.
Report a vulnerability
Email security@hippomundo.com. Describe the issue and its impact as you understand it, the affected URL or operation, the steps to reproduce it and the UTC time of your test. Include the request ID from any error response. We review every report and may contact you for more detail.
Keep secrets and personal data out of reports
Do not send API keys, passwords, session cookies or Customer data. If a finding exposes such data, describe what you could reach, stop, and do not keep, share or use it. Test only with your own account and API keys, preferably in the sandbox, and do not degrade the service for others.
No bug bounty
Hippomundo does not offer a bug bounty or payment for vulnerability reports.
Machine-readable contact
The same contact is published at /.well-known/security.txt.