Security disclosure
Report a security issue
We welcome good-faith reports that help us keep Meguro and its users safe.
Include the affected surface, reproducible steps, likely impact, and only the evidence needed to investigate.
Scope
meguro.io and Meguro’s application, API, MCP, authentication, development, staging, and practice endpoints.
Reporting
Email a clear description and reproducible steps. Access or retain no more data than necessary; if you encounter sensitive data, stop and report it.
Safe harbor
Warehouse One LLC will not initiate legal action against researchers who act in good faith, avoid privacy violations and service disruption, and allow us a reasonable opportunity to investigate before public disclosure.
Response
We aim to acknowledge your report within five business days and provide material progress updates while we investigate.
Bounty
This is not a bounty program, and no payment or reward is promised.