Security

Security / Responsible Disclosure

If you found a security issue, use this page to report it responsibly. Include the steps to reproduce, impacted area, and anything that helps us verify the issue faster.
Security contact
security@billpaymanager.com

How to report an issue

Please do not access other people\'s data, run destructive tests, or spam the form. Good reports usually include the affected URL or feature, what happened, what you expected, and any screenshots or proof-of-concept details that are safe to share.

Submit a report

This creates a security report directly inside the admin security inbox.
Email instead

What helps

  • Clear reproduction steps.
  • The exact page, feature, or route affected.
  • What you expected versus what happened.
  • Impact details, even if it's only your best guess.

Ground rules

Please keep testing non-destructive and avoid touching anyone else's data. If you are unsure whether something crosses a line, stop there and report what you have.