Reporting a security problem

If you think you have found a weakness in Sortr, please tell us.

Effective 17 October 2026 · Version 2

How to report it

Email team@sortr.xyz, in English. Say what you found, where (the bot, the dashboard at sortr.xyz or its API), how to reproduce it, and how we can reach you. Please do not report it in a public place, such as a Discord server or social media.

What we ask while you look

• Test only with Discord servers and accounts that are yours.
• Do not read, change or delete other people's data. If you reach any by accident, stop, do not keep it, and tell us what you saw.
• Do not slow down or overload Sortr, send spam, or try to trick the people who run it or its users.
• Give us time to fix it before you tell anyone else: until it is fixed, or 90 days after your report, whichever comes first.

What we do

• We confirm that we got your report within 5 working days, and keep you told of what we do.
• If you follow this page in good faith, we will not take legal action against you for your research.
• Once it is fixed, we thank you by name if you would like that. Sortr is free and has no reward programme.

Not covered here

Problems in Discord itself go to Discord. Reports from automated scanners that do not show an actual way to harm Sortr or its users are welcome, but may not get a full answer.