Any security related issues should be reported to Overcast through our contact form on the website, a member of our security team will triage any reports and reach out to you to update you on the outcome. We will do our best to provide a detailed response with our reasoning on why the report is invalid/valid and state the potential impact on our service.
Valid reports may be eligible for a monetary reward that will be paid out via PayPal, there are no set reward ranges (yet) but we will do our best to fairly compensate researchers within our current small budget.
We are a product built for and with input from Whitehat hackers, so it's only right those same hackers help keep us safe! We look forward to working with you all.