Trust
Security at WODBuilders
We treat account security, billing integrity, and anti-abuse controls as product features.
How to report a security issue
Email security@wodbuilders.com. Include reproduction steps, affected URLs, and screenshots if possible.
We aim to acknowledge credible reports within 3 business days and keep you updated until resolution.
What we currently protect
- Server-side plan enforcement for Free vs Pro features
- Rate limiting and suspicious traffic logging on sensitive endpoints
- Signed Stripe webhook verification and backend-managed subscription state
- Row-level security in Supabase for user-owned data
- Branded auth links on the WODBuilders domain for password reset and magic link flows
Scope
Please avoid automated scanning or any action that could degrade service for athletes using the product. Good-faith testing on your own account is welcome.