LedgerDo takes security seriously and appreciates responsible reports from researchers and users.

Please do not disclose suspected vulnerabilities publicly through GitHub issues, discussions, pull requests, or social media.

Report security issues through:

• https://ledgerdo.com/.well-known/security.txt
• https://ledgerdo.com/contact

When possible, include:

• A clear description of the issue
• Steps to reproduce
• The affected URL or feature
• The potential impact
• Screenshots or proof-of-concept details when safe to share

LedgerDo will review reports and respond as appropriate.

Public-facing LedgerDo services and public repositories are in scope.

Testing must avoid:

• Privacy violations
• Data destruction
• Service disruption
• Spam
• Phishing
• Social engineering
• Accessing other users' data