Report a security issue
If you find a security issue in Memoquid, we want to hear about it. Here is how to report it, and what you can expect.
What is in scope
- Memoquid's own websites, apps and services: memoquid.com and its subdomains, the Andromeda app, Memoquid Teams and Cyberquid.
What is out of scope
- Denial-of-service testing, spam, and anything that degrades the service for others.
- Social engineering, phishing or physical attempts against our people or offices.
- Services run by other companies that we use. Report those to them.
- Reports from automated scanners without a demonstrated impact.
How to report
- Email contact@memoquid.com with "Security" in the subject. Tell us what you found, where, the steps to reproduce it, and what an attacker could do with it.
What we ask of you
- Access only what you need to show the issue, and stop as soon as you have shown it.
- Do not change or delete data, and do not keep or share anyone's information you come across.
- Give us a reasonable time to fix the issue before you tell anyone else about it.
What you can expect from us
- We will confirm we received your report, keep you updated while we work on it, and tell you when it is fixed.
- If you act in good faith and follow this policy, we will not take legal action against you for your research, and we will tell anyone who asks that your work was authorized.
Last updated 9 November 2026.