Security
Report a vulnerability
Where to write
Write to security@realmsso.com.
What to include
- the URL or API route involved;
- the steps that reproduce the problem;
- what you saw, and the impact you think it has;
- how we can reach you.
Before you disclose
Please give us time to fix the problem before you disclose it.
There is no bug bounty.
Our security.txt is at /.well-known/security.txt. For a summary of how RealmSSO is protected, see Security.