Report a vulnerability

TEMassist is an independent personal project, not a company. There is no bounty and no response-time guarantee. There is a person who reads this and fixes what is real.

What is in scope

temassist.tech and www.temassist.tech — the briefing application, the sign-in flow, and the product site. Anything that exposes one reader's briefings, account or uploads to another, or that lets someone act as an account they do not own.

What is not

Findings against Navigraph or SimBrief — report those to them; we are an independent project and have no control over their systems. Volumetric or denial-of-service testing, social engineering, and physical access are out of scope. Missing hardening headers with no demonstrated impact are welcome as a note, but they are not a vulnerability on their own.

What we ask

Use your own account and your own data. Do not access, modify or keep anybody else's. Give us a reasonable chance to fix it before you publish. Nothing here is a legal waiver, and nothing here is a threat: report in good faith and you will be treated in good faith.