Last updated: 22 May 2026
Email security(at)upinity.com with: a description of the vulnerability, the affected endpoint or component, reproduction steps, and (if applicable) a proof-of-concept. Please do not post vulnerabilities publicly before we've had a chance to acknowledge and fix them.
In scope: upinity.com (marketing site), app.upinity.com (SaaS application), and our marketing platform, which receives the forms. Out of scope: social engineering or phishing of POWERB staff, denial-of-service or volumetric attacks, vulnerabilities in third-party services we depend on (Stripe, hosting providers — please report directly to them).
We don't currently operate a paid bug bounty programme. Researchers who report valid vulnerabilities responsibly are credited on a public hall of fame (with their consent) and receive a written acknowledgement letter.
GDPR / Swiss nLPD compliance is detailed in our Privacy Policy.
We will not pursue legal action against researchers who follow this policy, act in good faith, do not access or modify data beyond what is necessary to demonstrate the vulnerability, and do not impact availability of the service.