Security

Responsible disclosure

If you believe you've found a vulnerability, please report it privately.

How to report

Email support@threadline.to with details and reproduction steps.

Include affected endpoints, expected vs actual behavior, and any relevant logs.

We aim to acknowledge reports within 48 hours.

There is currently no bug bounty program. We will acknowledge valid reports and work to remediate issues quickly.