Security
BuildCostPilot welcomes responsible reports of security vulnerabilities that could affect the website or its visitors.
Report a vulnerability
Send security reports to security@buildcostpilot.com. Please include a clear description, affected URL or feature, reproduction steps, potential impact, and any relevant screenshots or logs that do not expose another person's data.
Coordinated disclosure
Please give BuildCostPilot a reasonable opportunity to investigate and address a report before public disclosure. BuildCostPilot does not promise a bug bounty, reward, or payment for reports.
Testing expectations
Do not perform destructive testing, denial-of-service testing, social engineering, spam, physical attacks, or attempts to access, change, or delete data that is not yours.