Security disclosure

Tell us about security problems in TakesNo before anyone else.

Where: abuse@takesno.com. Machine-readable contact: /.well-known/security.txt.

What we ask. Give us reasonable time to fix a problem before you publish it. Do not access, change or delete data that is not yours; if you reach someone else's data, stop and tell us. No denial-of-service tests and no social engineering. Test only with scans and accounts you created.

What we do. We acknowledge within 3 business days and keep you informed. We will not take legal action over good-faith research within these rules. We credit you if you want credit, and tell you when the fix ships.

In scope: takesno.com, the free scan, the product and its API.

Out of scope: sites people scan with TakesNo (they are not ours); third-party providers; anything needing physical access or a compromised device.

Scanner misuse. If you believe TakesNo was pointed at your site without permission, write to abuse@takesno.com with the address. We act on it.