Security

How to report it

Email hello@usecadential.com with "Security report" in the subject. Please include:

• what you found and where (the page or address);
• the steps to reproduce it;
• what someone could do with it, as you see it;
• how to reach you, and whether you would like to be credited.

We reply within 3 business days.

What we ask

• Only test against your own account, licence or data.
• Do not access, change or delete other people's information. If you come across it, stop and tell us.
• No denial of service, spam, social engineering of our team or artists, or physical attacks.
• No automated scanning that sends large volumes of requests.
• Give us a reasonable time to fix the problem before you talk about it publicly.

What we promise

• We will confirm we received your report and keep you updated.
• We will not take legal action against good-faith research that follows this page.
• We will credit you when the fix is out, if you would like that.

cadential. is a small business and does not run a paid bug bounty.

Emails that claim to be from us

Genuine cadential. emails come from an address ending in @usecadential.com. We will never ask for your password, a sign-in code, or card details by email, phone or social media message, and we never ask artists to change payout bank details through a link in an email.

If a message looks wrong, do not click its links. Forward it to hello@usecadential.com and we will tell you whether it is real. You can check any licence yourself on Verify a licence.