The Credentials Catalogue

Security vulnerability disclosure policy

If you believe you have found a security vulnerability in this site, please tell us. We would rather hear it from you than find out another way.

Reporting a vulnerability

Email credentialcatalogue@proton.me with:

A clear description of the vulnerability.
Steps to reproduce it. Screenshots or logs help.
The impact you think it has.

We acknowledge receipt within 48 hours and will work with you to understand and resolve the issue.

Safe harbour

To encourage responsible disclosure, we commit to:

Take no legal action against researchers who follow this policy.
Work with you to validate and remediate the issue.
Publicly credit your contribution, if you want that.

Out of scope

Please do not:

Run denial of service attacks.
Attempt physical attacks or social engineering.
Access, alter or destroy anyone else's data.

This is a static site with no accounts, no database and no user data. Reports about the content itself, such as a wrong price or a dead link, are welcome at the same address.

← Back to the catalogue