Report a security problem
If you think you've found a security vulnerability in Dependabullet, please tell us privately so we can fix it before it's used against anyone.
How to report
Email security@dependabullet.com with the page or API endpoint affected, steps to reproduce, what an attacker could do with it, and how to reach you.
Please do
- use test accounts you created yourself
- stop as soon as you can show the problem, and don't keep any data you saw
- give us reasonable time to fix it before telling anyone else
Please don't
- access, change or delete other people's accounts or data
- run automated scans or load tests that slow the site down
- use phishing, social engineering or physical attacks
- test the listed retailers' own websites
Scope
In scope: dependabullet.com and subdomains we operate. Out of scope: services run by other companies that the site uses (sign-in, payments, hosting, email); report those to the provider. Our privacy policy lists them.