Find it
A real security weakness in the Ashlonk app, our servers or ashlonk.com — something that could put someone’s account, messages or privacy at risk.
Security · Hall of Fame
The people who made Ashlonk safer.
Security researchers who found a weakness in our app, our servers or this website — and told us privately first, so we could fix it before anyone got hurt. Every name on this page protected people they will never meet. Thank you.
We acknowledge every report within 48 hoursThank you
This wall is waiting for its first name.
No one is listed yet. Find a real weakness in Ashlonk, report it privately, and the first name here could be yours.
Report a vulnerabilityPlay fair, get credit.
Credit goes to research done in good faith. That means:
- You reported it to us privately first, and gave us reasonable time to fix it before talking about it in public.
- You tested only with accounts you own or have permission to use, and never accessed, changed or kept anyone else’s messages or data.
- You did not disrupt Ashlonk for other people — no denial-of-service, no spam, and no tricking our team or our users.
- You were the first to report it. If two people find the same thing, the first report gets the credit.
We will never take legal action against good-faith research that follows these rules. The full policy is on our Security page and in security.txt.
How to get on the wall
Tell us privately
Email security@ashlonk.com with the steps to reproduce and your app version. Keep it between us until it is fixed.
We fix it
We confirm your report within 48 hours, keep you posted while we work, and tell you when the fix ships.
You are on the wall
Once the fix is live, we add you here — by name, by handle with a link of your choice, or anonymously. Your call.