Security

How to report a security problem

If you think you have found a security problem in Changed (itschanged.app), email us. A person reads every report.

What to send

• What you found, and the page or link where it happens.
• The steps to see it again, and what you saw.
• How to reach you, if not by replying to your email.

What we ask

• Test with your own account and your own change orders only.
• Don't open, change or delete anyone else's data. If you see something that isn't yours, stop there and tell us.
• Don't send emails or texts to people who didn't ask for them, and don't try to slow the site down or take it offline.
• Give us a fair chance to fix it before you tell anyone else.

What we do

We'll reply to say we have it, tell you what we found, and let you know when it's fixed.

For anything else, see Help. This page is listed in security.txt.