Security

Toolsy takes security seriously. If you discover a vulnerability, please report it responsibly.

Reporting

Email [email protected] with a description, steps to reproduce, and impact assessment. Do not publicly disclose before we have had a reasonable time to fix (typically 90 days).

Scope

toolsy.lol and staging.toolsy.lol web application and API. Out of scope: third-party services (TikTok, Cloudflare, hosting provider).