Report a security issue

Provide enough information to investigate without exposing more data.

On this page
  1. Reporting channel
  2. What to include
  3. Safety boundaries

Reporting channel

Contact [email protected] with the affected product/domain, behavior and time. For an account or privacy concern, [email protected] can help route your request.

What to include

Send enough detail to investigate: product or URL, time, minimal reproduction with data you control, and expected impact. Never send passwords, live tokens, customer records or content taken from someone else’s account. Prefer [email protected].

Safety boundaries

Do not conduct disruptive tests, spam, unauthorized access or data collection to increase evidence. A report does not itself grant testing permission or promise a reward. Handling depends on the information and contact available; no unpublished response deadline is promised.