Report a security problem

If you think you have found a weakness in Mboni, please tell us before you tell anyone else.

Use the contact details on the help page.

What to send

What you found, where you found it, and the steps to see it again. Please do not include real people's personal data in your report.

What we ask

Look only at your own test accounts. Do not read, change or delete other people's data, do not slow the service down, and give us reasonable time to fix the problem before you share it.

What you can expect

We will reply, tell you when it is fixed, and thank you if you want to be named. We do not take legal action against people who follow these rules in good faith.