Connect with us.
Instead of a detached email inbox, submit your questions, problem reports, security vulnerabilities, or opportunity ideas directly into our team triage desk. We review and respond to every direct submission.
Direct Communication Desk
We believe communication should be transparent and accountable. Every query is logged into our internal triage system so real engineers and researchers can address problems and opportunities directly.
Official LinkedIn Presence
Follow verified company updates, milestone briefs, and public announcements on our official organization page.
Community Discord Server
Join our community server to collaborate with early founding members, ask live questions, and discuss new opportunities.
Security & Vulnerability Policy
Found a potential security weakness, bug, or access flaw? Review our guidelines and report directly to engineering below.
Security Vulnerabilities & Safe Harbor Policy
WorknProof is committed to maintaining evidence-backed safety and security for global participants and partners. If you discover a vulnerability or security risk across our applications, APIs, or infrastructure, we encourage responsible disclosure so our team can triage and resolve it swiftly.
- •Access & Authentication: Session flaws, auth bypasses, broken object-level authorization (BOLA/IDOR), privilege escalation.
- •Data Protection & Secrets: Exposure of sensitive credentials, token leakage, or unauthenticated API database queries.
- •Injection Vectors: SQL/SQLite injection, Server-Side Request Forgery (SSRF), remote code execution, or parameter tampering.
- •Domain & Infrastructure Integrity: DNS spoofing, subdomain takeover risks, and malicious crawler deception.
- •Coordinated Timing: Allow our engineering team adequate time to investigate and deploy patches before disclosing publicly.
- •Do No Harm: Do not exploit weaknesses to access user data, disrupt system availability (no DDoS), or execute social engineering attacks.
- •Engineering Triage Commitment: We acknowledge valid reports within 24 to 48 hours and provide direct engineering updates as patches are validated.
Have a security issue or vulnerability to submit?
Submit directly through our encrypted query desk above for immediate triage and tracking.