The current Workloom Windows executable is not code-signed.
Download Workloom only from this repository's Releases page and verify the SHA-256 checksum:
DA92DC46F562252C3D56B2EA64D7BE89491C32C9F64C2A6CE639C1261EA8D013
To report a security issue, open a GitHub Issue containing a reproduction description without personal data.