Security

Report a vulnerability

Please report it privately: through GitHub private vulnerability reporting on the plugin's repository, or by email to security@dobi.invalid. Don't open a public issue. We acknowledge a report within 3 business days and keep you told as we fix it.

In scope: the Dobi plugin, the app and its API, and this site. Please don't test against other people's accounts or data, run denial-of-service tests, or use social engineering.

Abuse and takedown

To report abuse of Dobi, or content you want taken down, write to support@dobi.invalid with what you found and where. We reply within 3 business days.

Our security.txt lists the same contacts.