Security

Report a security problem

If you find a weakness in Is It?, please tell us privately at support@lunarcrush.com with "Security report" in the subject.

• We welcome good-faith research and will not pursue legal action for testing that follows this policy.
• Don't access other people's submissions, run denial-of-service tests, or use the link checker to scan other sites.
• We aim to acknowledge reports within three business days and to coordinate disclosure after a fix.
• We don't currently offer cash rewards. We will credit you here if you'd like.

Machine-readable: /.well-known/security.txt

Thanks

To the security researchers whose public work Is It? stands on: CISA's Known Exploited Vulnerabilities team, Cloudflare's Zero Wire, and everyone who writes up an attack so the rest of us can defend against it.