Bug report
Found a bug?
Something broken, slow or not quite safe? Tell me what happened. I read every report, fix what I can, and thank you on the wall.
- —bugs fixed
- —security finds
- —bug hunters
- 1Tell me what broke
Where it happened, what you saw, and how to see it again. Security issues go through the same form.
- 2I check and fix it
Reports stay private. Security details never go on this page.
- 3You go on the wall
Once it’s fixed, your name goes up with a one-line note. Or stay anonymous.
Ground rules
- Only test with your own browser and your own data.
- No floods, spam or automated scanners, and no tricking people.
- Don’t read or change anyone else’s data. Found a way in? Report it and stop there.
- Give me 30 days to fix it before you share it anywhere.
- The reward is credit on this wall. No cash, just credit.
- Follow these and I’ll treat you as a helper, not an attacker.
Bug hunters
No bugs pinned yet
Find the first one.Reports are private. Only Nopalinto reads them, and contact details are deleted 90 days after a report is closed. Researchers: see security.txt.

