Security and abuse

Apps at name.domino.page are made and run by Domino’s customers, not by Domino. If one is used for phishing, malware, spam, scams, or anything else harmful, email us with:

• the full address of the page,
• what you saw, and when,
• screenshots, if you have them.

The same goes for a customer’s own domain run on Domino.

If you find a vulnerability in Domino itself, such as Console, the API, the SDK and CLI, or app hosting, email us the steps to reproduce it and what an attacker could do with it.

• Test only with your own account and projects.
• Don’t read, change, or delete other people’s data.
• Give us a fair chance to fix it before you tell others.