Security

Last updated: October 19, 2026

If you think you've found a security problem in Plum Grove Tools ("the Site"), please tell us privately, and don't post it publicly.

How to report

Email dave@plumgroveinc.com and put the words security report in the subject line, so it isn't lost in routine mail.

What to include

• What the problem is, and what someone could do with it.
• The steps to reproduce it, or a small proof of concept.
• The page or address where it happens.
• A suggested fix, if you have one.

What happens next

We aim to acknowledge a new report within 3 business days, and to have a fix, or a plan for one, within 30 days, depending on how serious it is.

The same contact is in this site's /.well-known/security.txt.