We commission annual third-party penetration tests and publish the results — good and bad. Transparency is non-negotiable.
We believe publishing audit results — including vulnerabilities found — builds more trust than any privacy policy could.
We run a responsible disclosure programme. Security researchers who report valid vulnerabilities are credited publicly and may be eligible for our bounty programme.
Email security@tempmail.io with a clear description and steps to reproduce. PGP key available on our security page.
We acknowledge all reports within 4 hours and provide a full response within 48 hours, including our assessment and timeline.
Critical and high-severity findings are eligible for our bounty programme. Payouts range from $200 to $5,000.
We commit to not pursuing legal action against researchers acting in good faith and following our disclosure guidelines.
Annual audits, active disclosure, and a team that takes every report seriously.
Report a vulnerability