Security

Last updated: 2026-05-30.

1. Overview

Get Formali implements reasonable security measures for a small SaaS. If you discover a vulnerability, please report it responsibly.

2. Account security

Passwords are stored hashed (never in plain text).
CSRF protection is used for authenticated actions.
Rate-limiting is applied for sensitive endpoints.

3. Submission security

Payload size limit and field validation.
Basic anti-abuse protections (rate-limits, honeypot).
Redirects are allowed only to safe URLs.

4. Reporting

Security contact: contact@getformali.com

Please include steps to reproduce, impacted URLs, and proof-of-concept details.