Company
Security
AIMarketCaps is a small independent site. We take security reports seriously and would rather hear from you than find out later.
How to report an issue
Send the details through the Support page with a short description of the problem and how to reproduce it. Please don't post the details publicly — in a comment, on social media, or in a review — until we've had a chance to look at it.
A working security contact with its own address isn't connected yet, so the Support page is the route for now.
In scope
- Ways to read, change or delete another person's account data, watchlist or email.
- Broken access rules on the subscription and listing-request forms.
- Anything that lets you run code against the site or its visitors.
- Authentication, session and password-reset weaknesses.
Out of scope
- Automated scanning, brute forcing, or anything that degrades the site for others.
- Testing against other users' accounts or data.
- Physical, social-engineering or denial-of-service attacks.
- Findings that only matter if you already control the machine.
- Third-party services we don't operate — pay the provider instead.
What we ask and what you get
Only test systems you own or have explicit permission to test, and stop as soon as you've proven an issue exists. We don't run a paid bounty programme, but we will confirm receipt, work on a fix, and credit you in our changelog if you'd like it.