Back to home

Security and vulnerability reporting

Last updated: 22 October 2026

This translation is provided for informational purposes only. In case of discrepancy, the Spanish version prevails.

At FireFighter we take our users' security very seriously. If you have found a vulnerability in the bot, the website, the dashboard or its API, we would be grateful if you reported it to us responsibly so we can fix it as soon as possible.

1. How to report it

• By email: support@firefighterbot.xyz
• Through this website's support chat (chat button in the bottom corner). The chat uses end-to-end encryption: only you and our team can read the messages.

You can write to us in Spanish or English.

2. What to include in the report

• What you found and where (URL, endpoint or command).
• Steps to reproduce it.
• The impact you think it has.
• If you have them, screenshots or a minimal proof of concept.

3. What we ask of you

• Do not access, modify or delete other users' data beyond what is strictly necessary to demonstrate the issue.
• Do not carry out denial-of-service attacks, spam or social engineering against our team or users.
• Do not publish the details until we have had a reasonable time to fix it.
• Do not include third parties' personal data in the report.

4. What you can expect from us

• We will review your report as soon as possible and keep you informed.
• We will not take action against anyone who acts in good faith and follows these guidelines.
• If you wish, we will credit your contribution once the issue is fixed.

We do not currently offer monetary rewards for reports.

5. If you think your account is at risk

We will never ask for your password or token by direct message. If you receive a suspicious message claiming to be from us, do not reply and let us know by email or through the support chat.

More information about how we handle your data in our Privacy Policy.