Security

Report a vulnerability

Found a security problem? Thank you. Write to security@figbook.app.

What to send

• The affected version and platform (iPhone, Mac, Android or Linux).
• The steps that show the problem.
• The file that triggers it, if there is one.

What to expect

• An acknowledgement within 7 days.
• Credit for the report, if you would like it.
• Please allow 90 days before publishing details, so a fix can ship first.
• There is no bug bounty.

Scope

In scope: the Figbook app, how it handles .figbook files, and this website.

Out of scope: the content of sample files, social engineering, and the hosting provider’s own systems.

Machine-readable

The same details are in security.txt. English and Portuguese are both fine.