Legal
Reporting a Security Issue
Last Updated:
If you find a security issue in an Ablestar app or on this website, email security@ablestar.com.
Include the URL, the steps to reproduce the issue, and the request or payload you used. A screenshot or short recording helps. We read every report.
Scope
Reports about these are in scope:
- Ablestar Bulk Product Editor
- Ablestar Link Manager
- Ablestar Email Reports
- Ablestar WooCommerce Importer
- This website, ablestar.com
Out of scope
- Services we use but do not operate, such as Shopify, Help Scout, Netlify, and Google Cloud. Report those to the provider.
- Findings with no practical impact, for example missing headers on static pages, version banners, or automated scanner output without a working proof of concept.
Rewards
Ablestar does not have a bug bounty program and does not pay for security reports.
Machine-readable contact
The same contact is published at /.well-known/security.txt in the RFC 9116 format.