Responsible security disclosure
Help improve MyIPCheckup without harming users, providers, or third-party systems.
In scope
First-party pages and API routes served from myipcheckup.com. Use the minimum testing needed to demonstrate an issue.
Out of scope
Cloudflare, GitHub, The Tor Project, visitor networks, VPN providers, email systems, denial of service, social engineering, malware, destructive testing, automated high-volume scanning, and access to data that is not yours.
Report safely
Stop if personal data or secrets appear. Preserve evidence without copying unnecessary data, contact the project, and allow reasonable time for investigation before disclosure. No bounty is promised.
Open security contact