Security at Devello

Who is responsible

Security at Devello Inc is led by Gurjeet Singh, Founder & Security Lead. Security reviews of our own software and infrastructure are done in-house.

Reporting a vulnerability

If you believe you’ve found a security problem in a Devello website or app, email gurjeet@develloinc.com with “Security” in the subject. Please include:

• what you found, and where;
• the steps to reproduce it;
• what someone could do with it.

We aim to acknowledge every report within three business days and to keep you updated until it is resolved.

What this covers

• develloinc.com
• devellostudios.com
• thewhyengine.website
• the iOS apps Devello publishes

Please don’t

• access, change or delete anyone else’s data;
• run denial-of-service or load tests;
• use social engineering or physical attacks;
• share the problem publicly before we’ve had a fair chance to fix it.

How we work

Secrets never live in our code or repositories. Commits to our products are cryptographically signed, and every change to production is reviewed before it ships.

Machine-readable contact details: /.well-known/security.txt