Vulnerability Disclosure

Email security@shakerscan.com or open a private advisory at github.com/andriyze/shakerscan/security/advisories/new. Never use a public issue. Include the version, component, steps to reproduce and impact.

Acknowledgement within 3 business days; assessment within 10. Test only ShakerScan-owned surfaces with accounts you created, and stop if you reach anyone else’s data. There is no paid bounty; we credit reporters unless you prefer otherwise.