Last updated: October 1, 2026.
Our commitment
If you find a security problem in Meeting Mouse, we want to hear about it. We will work with you to understand it and fix it, and we will not take legal action against research done in good faith under this program.
How to report
Please report privately. Do not open a public issue.
- Use GitHub's private vulnerability reporting on the Meeting Mouse repository, https://github.com/masaok/meetingmouse: open its Security tab and choose Report a vulnerability.
- Or write to support@meetingmouse.net.
Include the address or component affected, the steps to reproduce it, and what an attacker would gain. A working example helps us confirm it quickly.
What to expect
- An acknowledgement within 7 days.
- A fix, or a reasoned decision, as soon as one exists. We tell you which.
- Credit for the finding when the fix is published, if you want it.
We do not run a bug bounty and do not pay for reports.
In scope
- The hosted app at app.meetingmouse.net and this website, www.meetingmouse.net.
- Verification of Slack request signatures, and handling of replayed requests.
- Who may act on a poll: organizer-only actions, and access from one poll or workspace to another.
- Anything that lets credentials or another workspace's data reach a browser.
- Injection through poll titles, user input or Slack payload fields.
Out of scope
- The Slack platform itself. Report those problems to Slack.
- Problems in our hosting or database providers. Report those to the provider.
- A self-hosted copy of Meeting Mouse that someone else configured.
- Findings that need a bot token or database credential that is already compromised.
- Denial of service by volume, social engineering, and physical attacks.
Rules for testing
- Test only against a Slack workspace you control.
- Stop when you have shown the problem exists. Do not read, change or delete data that is not yours.
- Do not degrade the service for others.
- Give us a reasonable time to fix the problem before you describe it publicly.
Changes
When this program changes, this page is updated and given a new date.
Contact
Write to support@meetingmouse.net. We reply within 2 business days.