Security
Dayopt implements the highest standards of security to protect your information.
Security Policy
Supported Versions
| Version | Status |
|---|---|
| 1.x.x | ✅ Security updates provided |
| < 1.0 | ❌ No longer supported |
Security Measures Implemented
- HTTPS Enforcement: All communications encrypted with TLS 1.3
- Multi-Factor Authentication (MFA): TOTP (Time-based One-Time Password) support
- Rate Limiting: Brute force attack prevention
- SQL Injection Protection: Prisma ORM + parameterized queries
- XSS Protection: React automatic escaping + Content Security Policy
- CSRF Protection: SameSite Cookie + token verification
- Dependency Management: Weekly checks with Dependabot
- Error Monitoring: Real-time monitoring with Sentry
Reporting Vulnerabilities
⚠️ Do not report security vulnerabilities in public places
Publishing vulnerabilities on social media, forums, or public issue trackers may enable malicious actors to exploit them. Please report them privately to our security team by email.
How to Report
Send vulnerability reports by email to the address below.
- Email: security@dayopt.app
Information to Include
- Vulnerability type (XSS, SQL Injection, authentication bypass, etc.)
- Affected versions
- Reproduction steps (detailed steps)
- Proof of Concept code (if available)
- Potential impact (data breach, service disruption, etc.)
- Recommended fix (optional)
Response Timeline
| Severity | Initial Response | Fix Release |
|---|---|---|
| Critical | Within 24 hours | Within 48 hours |
| High | Within 48 hours | Within 1 week |
| Medium | Within 1 week | Within 2 weeks |
| Low | Within 2 weeks | Next release |
Responsible Disclosure
Safe Harbor
We will not take legal action against security research activities conducted in accordance with these guidelines.
✅ Allowed Activities
- • Testing using your own account
- • Investigating and reporting vulnerabilities
- • Creating proof of concept code
❌ Prohibited Activities
- • DoS/DDoS attacks
- • Accessing others' data
- • Disclosing to third parties before public release
Related Documents
Contact Us
Security Team: security@dayopt.app
General Inquiries: support@dayopt.app
Thank you for helping us improve security. Your reports help keep all users safe.
Last Updated: September 14, 2026