How Do I Report a Security Vulnerability in Gleam?

Email our security team at security@gleam.io. It goes straight to the people who can fix it, which is quicker than the support form.

Include:

1. The URL, Action or feature affected.
2. Steps to reproduce the issue.
3. What someone could do with it, and what data it exposes.
4. Screenshots or a proof of concept, if you have them.

We run a bug bounty program with cash bounties through HackerOne. To report through it or join it, say so in your email and the security team will reply with the details. More on how we protect data is on our Security page.

Found a fake or scam giveaway rather than a bug? Report the campaign with a link to it, so we can review it and take it down if it breaks our Terms.