Reporting a security issue

If you have found a security issue in the Salad app, salad.com or any other Salad service, email the details to [email protected]. Reports are checked by the engineering team and reviewed. Alternatively, you can open a GitHub security advisory on the GitHub repository.

What to include

• What the issue is and what it allows an attacker to do.
• Steps to reproduce it, with the affected URL, app version or component.
• Any screenshots or logs that show the problem.

Ground rules

• Do not test against production accounts, Salad Balance or other Chefs' data. Use your own account and your own machines.
• Do not run denial-of-service tests, spam or social engineering against Salad staff or Chefs.
• Do not publish the issue before Salad has had a reasonable chance to fix it.

Please refer to our Terms of Service for accepted use and restrictions.

If you are not reporting a vulnerability but think your own account has been compromised, see Keeping your account secure and contact Salad Support.