Skip to main content

Loading TaxNinja...

TaxNinja TaxNinja
✓ 2026 IRS Rates

Estimate only — not tax advice. TaxNinja provides calculations for informational purposes only. Results are estimates based on 2026 IRS figures. Consult a licensed CPA for official tax preparation. See our methodology →

Security Policy

How we handle security at TaxNinja and how to report vulnerabilities.

What Is a Security Issue?

A security vulnerability is any bug that could compromise the confidentiality, integrity, or availability of TaxNinja or its users.

  • Cross-site scripting (XSS)
  • Cross-site request forgery (CSRF)
  • Clickjacking or UI redress attacks
  • Content injection or data manipulation
  • Authentication or session vulnerabilities
  • Server-side code execution vulnerabilities

How to Report

If you discover a security vulnerability, please report it responsibly:

  1. Email: security@taxninja.site
  2. Include a clear description of the issue
  3. Provide steps to reproduce the vulnerability
  4. Include any relevant screenshots, code, or proof of concept
  5. Do not access, modify, or delete other users' data

Response Time

We will acknowledge your report within 48 hours and aim to resolve confirmed issues within 30 days. We will keep you updated on the progress throughout the process.

Scope

In Scope

  • taxninja.site
  • All subdomains
  • All pages and features

Out of Scope

  • Google AdSense
  • Google Fonts
  • Vercel infrastructure

Bug Bounty

TaxNinja does not currently offer a bug bounty program. We appreciate responsible disclosure and will credit researchers who report confirmed vulnerabilities (with their permission).