Report a Security Issue

If you believe you've found a vulnerability in Hoycall, please send us an email. We take security seriously and aim to acknowledge every report within 5 business days.

Email us — sigve@hoycall.com

Responsible Disclosure

We take security seriously and appreciate your help in keeping Hoycall safe.

What to Report

  • Authentication or authorization vulnerabilities
  • Data exposure or privacy issues
  • Cross-site scripting (XSS) or injection flaws
  • Business logic vulnerabilities
  • Any other security concerns

Our Process

  • We'll acknowledge your report within 5 business days
  • We'll investigate and keep you updated on progress
  • We'll work with you to understand and resolve the issue
  • We'll credit you (if desired) once the issue is fixed

Guidelines

  • Do not access or modify data that isn't yours
  • Do not perform actions that could harm our users or services
  • Give us reasonable time to fix issues before disclosure