Reedsy Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: well-known/reedsy-security.txt
docs: https://reedsy.com/security
policy:
- https://reedsy.com/security
contact:
- mailto:security@reedsy.com
program:
  type: vulnerability-disclosure
  safe_harbor: true
  scope: Reedsy-owned applications, public websites, APIs, and services reachable over
    the internet, including account flows, authentication, and payment integrations.
  rewards:
    low: $10
    medium: $25
    high: $50
    critical: $100
  exclusions:
  - denial-of-service testing
  - non-security bugs
  - social engineering
  - low-risk findings such as missing security headers without an exploit path
evidence:
- source: well-known/reedsy-security.txt
  kind: security.txt
- source: https://reedsy.com/security
  kind: disclosure-policy-page