Security contact
Send vulnerability reports to [email protected]. For abuse involving hosted resources, use [email protected].
DOCsecurity
Responsible Disclosure
What to include
- Affected domain, IP address, service, endpoint or system.
- Steps to reproduce, impact, timestamps and supporting evidence.
- Your contact details and whether you need attribution.
Good-faith testing
Please avoid data destruction, privacy violations, service disruption, persistence, social engineering, physical attacks, spam, extortion or accessing data that is not yours. Stop testing and contact us if you encounter sensitive data.
Response
We review good-faith reports, validate impact, prioritise remediation and may request more detail. We do not offer a public bug bounty unless separately agreed in writing.