# CloudConvert security policy
#
# If you believe you have found a security vulnerability in CloudConvert,
# our API or one of our official integrations, please report it to the
# address below. Do not disclose the issue publicly before we have had a
# chance to fix it. Include the affected URL or service, steps to reproduce
# and the potential impact. Only test against accounts you own and stop as
# soon as you have demonstrated the issue. We acknowledge every report and
# will not take legal action against researchers acting in good faith.
#
# We do not run a formal bug bounty program. At our discretion we may
# reward reports of significant vulnerabilities, but there is no
# guarantee of payment.

Contact: mailto:security@cloudconvert.com
Expires: 2027-04-10T00:00:00Z
Preferred-Languages: en, de
Canonical: https://cloudconvert.com/.well-known/security.txt
Canonical: https://api.cloudconvert.com/.well-known/security.txt