Where to send it
Email support@gex-levels.com with “security” in the subject. Tell us what you found, where, and how to reproduce it. A proof of concept helps; a video is fine. We read these ourselves — there is no queue to get lost in.
Security
Vulnerability
disclosure.
How to report a security problem in the site, the API, the browser extension, the platform indicators or the desktop application — and what we promise in return.
Machine-readable contact: /.well-known/security.txt
Reporting
How to reach us.
What we ask
Give us a reasonable time to fix the issue before you publish. Do not access, modify or delete data that is not yours, do not degrade the service for others, and do not run automated scans that generate load. Stop as soon as you have demonstrated the problem.
What we promise
We acknowledge reports, we tell you what we found and when it is fixed, and we will not pursue legal action over good-faith research that follows the two points above. We do not currently run a paid bug-bounty programme, and we will say so plainly rather than let you assume otherwise.
Scope
What is in, what is out.
In scope
gex-levels.com, api.gex-levels.com, the GEX Levels browser extension, the platform indicators we publish, and the desktop application. Authentication, session handling, licence verification, and anything that exposes another user's data are the areas we care about most.
Out of scope
Findings on third-party platforms (TradingView, NinjaTrader, Sierra Chart, MotiveWave, ATAS, Quantower, Discord, Whop) belong to those vendors. Volumetric denial of service, social engineering of our staff or customers, and reports produced only by an automated scanner with no demonstrated impact are not useful to us.
Data you may encounter
If a report incidentally exposes personal data, stop, tell us, and delete what you hold. We treat that as good faith. Keeping or publishing it is not.
Related
Policies & documents.
Terms of Service
The operative terms for the site, the account and every product. Read the Terms.
Privacy policy
What we process, why, and your rights. Read the policy.
Refund & cancellation
Trials, cancellation, and how refunds work. Read the policy.