# Security policy

How to report a security vulnerability in ClippingAlpha, what is in scope, and our promise of no legal action against research done in good faith.

As of 08:45 UTC on 27 Oct 2026. Page: https://clippingalpha.com/security

Last updated 7 October 2026

If you find a security problem in ClippingAlpha, tell us first so we can fix it. Momentist, Inc. operates ClippingAlpha and answers every report.

## Report a vulnerability

Email [dpo@clippingalpha.com](mailto:dpo@clippingalpha.com?subject=Security%20report) with the page, endpoint or app you tested, the steps to reproduce the problem, what someone could do with it, and how to reach you. A person reads every report and replies. Please give us a reasonable time to fix a problem before you tell anyone else about it.

## What is in scope

- clippingalpha.com and its subdomains, dev.clippingalpha.com included
- The MCP server at clippingalpha.com/mcp and its sign-in
- Our alert emails, push notifications and Telegram bot
- Your ClippingAlpha account, its sign-in and its connected accounts

## Out of scope

- The clipping platforms we link to. Each one runs its own site, so report a problem there to that platform.
- Denial of service, spam, phishing or social engineering of anyone, and physical attacks
- Scanner output with no working proof of a problem

## Good faith research

We will not take legal action against you, or ask anyone else to, for research done in good faith under this policy. Good faith means you avoid harm to people, their privacy and the service, you open only the data you need to show the problem and delete it afterwards, you change or destroy nothing, and you report what you find to us first.

## Contact and security.txt

Security reports: [dpo@clippingalpha.com](mailto:dpo@clippingalpha.com?subject=Security%20report)

Machine readable: [/.well-known/security.txt](https://clippingalpha.com/.well-known/security.txt)

By post: Momentist, Inc., 169 Madison Ave STE 38364, New York, NY 10016, USA

More about who we are: [About ClippingAlpha](https://clippingalpha.com/about)