Security
Reporting a security issue
If you believe you have found a vulnerability in a Grapeworks Ltd website or service, please tell us. This page explains how to report it and what happens next.
Last updated: 27 October 2026How to report
Email security@grapeworks.ai. Include the affected address or service, the steps to reproduce the issue, and what you saw. Please do not include other people’s personal data in your report; describe it instead.
What to expect
We aim to acknowledge a report within three working days, and to tell you when it has been fixed or why we have decided not to act on it. We will not take legal action against anyone who reports an issue in good faith and follows the guidance below.
Guidance for testers
Test only against systems that Grapeworks Ltd owns. Do not access, change or keep data that is not yours, do not disrupt a service, and do not test client websites or client data. If you believe a client system is affected, report it to us and we will tell the client. Give us reasonable time to fix an issue before you share it publicly.
Machine-readable contact
Our contact details are also published at /.well-known/security.txt.