responsible disclosure policy

OneWelcome has temporarily discontinued its bug bounty program. This means that we will not consider newly reported issues for financial reward, compensation and/or recognition until if and when we can restart the program by issuing our renewed policy on this website at a later time. While our email address for reporting issues will remain available at security@onewelcome.com, please understand it can only serve to responsibly inform us without consequences, meaning we will still guarantee your indemnity.