Bug bounty
Found a security issue? We want to hear about it — and we'll thank you for it.
How to report
Email security@jobslide.app with a description of the issue, steps to reproduce and its potential impact. Please include any proof-of-concept code or screenshots.
We'll acknowledge your report within 2 business days and keep you updated until it's resolved.
In scope
jobslide.appandapply.jobslide.app- The JobSlider API, CLI and MCP server
- The Chrome extension and mobile apps
Out of scope
- Denial-of-service or volumetric attacks
- Social engineering or physical attacks
- Reports from automated scanners without a demonstrated impact
- Missing best-practice headers with no exploitable consequence
- Third-party services such as employer ATS platforms
Rules of engagement
- Only test against accounts you own.
- Do not access, modify or delete other users' data.
- Give us reasonable time to fix the issue before any public disclosure.
Rewards
We reward valid, previously unreported issues based on severity and impact. We will not pursue legal action against researchers who act in good faith and follow this policy.