How it worksFeaturesPricingFree toolsFAQLog in

Security

Report a security issue

Found a vulnerability or security risk in Quarterwise? Tell us using the form below, or email security@quarterwise.co.uk. We acknowledge every report within one business day.

So we can acknowledge and follow up with you.
Your best guess helps us triage. See the disclosure policy for how we judge severity and what we pay.
Please don't include other people's personal data. Don't test against real customer accounts.

How we handle reports

  • We acknowledge your report within one business day.
  • We investigate and keep you updated on progress where appropriate.
  • If a report indicates a personal-data breach, we notify HMRC and the ICO within 72 hours, and affected customers without undue delay, as required.

Please report responsibly: give us reasonable time to investigate and fix the issue before any public disclosure, don't access or modify other people's data, and don't run tests that could disrupt the service for others. We're grateful for reports made in good faith.

Testing deliberately? Our vulnerability disclosure policy sets out what is in scope, the safe harbour we offer and the rewards we pay.

Prefer email? Write to security@quarterwise.co.uk.