Security

Vulnerability disclosure

If you've found a security issue affecting this website or our own infrastructure, we want to hear about it. This page covers reporting issues in our systems — it is not an authorization to test any client environment.

How to report

Email the address below with a description of the issue, the steps to reproduce it, and any supporting evidence. Please don't include sensitive data in the initial report; we'll request anything further we need through a secure channel.

What to expect

We'll acknowledge legitimate reports and work to address confirmed issues in a reasonable timeframe.

Flagged for legal review: this page does not currently publish a formal safe-harbor or authorized-testing policy, response-time SLA, or legal commitments, and none should be inferred. A complete RFC 9116 security.txt is published at /.well-known/security.txt.