If you have found a security problem in D2PLAN, we would be glad to hear about it and fix it.
How to report
- Write to office@d2plan.com, describing the problem, how to reproduce it, and its possible impact.
- We will confirm receipt within three working days, and let you know when it is fixed.
What we ask
- Do not access other people's data beyond what is needed to show the problem, and do not change or keep it.
- Do not affect the service's availability (no load attacks), and no social engineering of users or staff.
- Do not publish the problem before it is fixed, or before 90 days have passed since the report — whichever comes first.
Our commitment
If you act in good faith and follow these rules, we will not take legal action against you over the research, and we will thank you publicly if you wish. There is no reward programme at the moment.
The details are also in the security.txt file.