Bake welcomes feedback from security researchers and the general public to help improve our security. If you believe you have discovered a vulnerability, privacy issue, exposed data, or other security issues in any of our assets, we want to hear from you. This policy outlines steps for reporting vulnerabilities to us, what we expect, what you can expect from us.
Systems in Scope
This policy applies to any digital assets owned, operated, or maintained by Bake.
Out of Scope
Assets or other equipment not owned by parties participating in this policy. Vulnerabilities discovered or suspected in out of scope systems should be reported to the appropriate vendor or applicable authority.
Our Commitments
When working with us, according to this policy, you can expect us to:
Our Expectations
In participating in our vulnerability disclosure program in good faith, we ask that you:
Official Channels
Please report security issues via security@bake.io, providing all relevant information. The more details you provide, the easier it will be for us to triage and fix the issue.
