Report a vulnerability

Sootir will never ask for your password or payment outside the app.

Found a security issue? Email security@sootir.com with steps to reproduce. We reply within 3 business days.

  • Only test against your own accounts or the demo accounts.
  • Do not access, change or delete other people's data.
  • Do not run denial-of-service or spam tests.
  • Give us reasonable time to fix the issue before sharing it.

We will not take legal action against good-faith research that follows these rules.

Or send it here (no account needed). Do not include anyone's personal data.