Skip to content

Security

Report a vulnerability

Where to write

Write to security@realmsso.com.

What to include

  • the URL or API route involved;
  • the steps that reproduce the problem;
  • what you saw, and the impact you think it has;
  • how we can reach you.

Before you disclose

Please give us time to fix the problem before you disclose it.

There is no bug bounty.

Our security.txt is at /.well-known/security.txt. For a summary of how RealmSSO is protected, see Security.