Security

To report a security problem in a Lesstep plugin or app, write to support@lesstep.com in English or Japanese. We usually answer within two business days (Japan time). 日本語

It helps to include

• Which tool and which version (for a plugin: Settings | Plugins), and your IDE and its version (Help | About)
• What an attacker could do, and the steps that show it
• Whether you have seen it used against anyone

Please do not send real access tokens or passwords, and please give us time to publish a fixed version before you write about it publicly.

How we tell users

A fix ships as a new version on JetBrains Marketplace (for Business Days, inside the monday.com app). Its change notes say what it fixes, and the advisory is listed below.

Advisories

None so far (October 28, 2026).

The same contact in machine-readable form: /.well-known/security.txt. Other questions: Support.