If you discover a vulnerability, please email security@wedoinggood.com with details and steps to reproduce. Do not publicly disclose until we’ve had reasonable time to investigate and fix.

We do not authorize security testing that degrades service or accesses user data without consent.