Security

Reporting a vulnerability

If you believe you have found a security vulnerability in EventWiz, please email security@eventwiz.ai. It helps us to act quickly if you include:

• the page or address where it happens;
• the steps that show the problem, and what you expected to happen instead;
• what someone could do with it, as far as you know.

Scope

This covers eventwiz.ai and its subdomains, and the EventWiz application and API.

While you look

• Only use accounts and events that are yours, or that you have permission to test.
• Do not look at, change, keep or share anyone else’s information. If you reach some by accident, stop, and tell us what you saw.
• Do not slow the site down for other people, and do not send messages to anyone who has not agreed to receive them.
• Please give us a reasonable opportunity to address the issue before any public disclosure.

What happens next

We will acknowledge your report and keep you informed as we investigate and resolve the issue.

Rewards

EventWiz does not run a paid bug bounty.

For security tools

The same contact details are published where automated tools look for them: /.well-known/security.txt