Soft TaskResponsible disclosure
Report a suspected vulnerability affecting Soft Task systems through the approved security contact.
Report privately
Send a concise description to vulnerabilities@softtask.co. Include the affected URL or system, a reproducible description and the potential impact. Remove personal data, credentials and unnecessary sensitive content from your report.
Keep testing within authorisation
This page is not authorisation to test our systems. Do not access other people’s data, disrupt services, attempt persistence or perform social engineering. If you encounter information unexpectedly, stop and report it without copying or distributing it further.
Sensitive evidence
Ask the security contact for an appropriate transfer method before sharing sensitive evidence. We may request clarification to reproduce and assess the issue. Do not publish details that expose users or systems while the matter is being assessed.
Service incidents
Existing customers should use their contracted support or incident-escalation channel. This disclosure address is not a published emergency hotline, response-time guarantee or bug-bounty programme.