See it. Know it.
Grow better.

Security Policy

Report suspected security issues privately. Do not open a public issue containing exploit details, secrets, signed URLs, private user data, or proof-of-concept output.

Updated August 10, 2026

In scope

Relevant reports include broken access control, private-data exposure, upload or signed-URL bypasses, exposed credentials, authentication problems, and high-impact dependency or browser-policy issues.

Safe testing

Use local, development, demo, or researcher-owned test data. Do not exfiltrate or disclose real user data, cookies, signed URLs, service credentials, or private photos.

Out of scope

Do not perform destructive production testing, denial-of-service testing, spam, social engineering, physical attacks, or scanner-only reports without reachable impact.

Report privately

Email security@budwise.app.

Report a security issue

Security contact

Keep exploit details and private data out of public issues.

security@budwise.app

A safer, brighter grow tomorrow.

Budwise

Opening Budwise

Budwise

See it. Know it.
Grow better.

Security Policy

Report suspected security issues privately. Do not open a public issue containing exploit details, secrets, signed URLs, private user data, or proof-of-concept output.

Updated August 10, 2026

In scope

Safe testing

Use local, development, demo, or researcher-owned test data. Do not exfiltrate or disclose real user data, cookies, signed URLs, service credentials, or private photos.

Out of scope

Do not perform destructive production testing, denial-of-service testing, spam, social engineering, physical attacks, or scanner-only reports without reachable impact.

Report privately

Email security@budwise.app.

Report a security issue

Security contact

Keep exploit details and private data out of public issues.

security@budwise.app

Search Budwise

Report privately

Security contact

A safer, brighter grow tomorrow.

Opening Budwise

Report privately

Security contact

A safer, brighter grow tomorrow.