Found something
we should know about?

Start with a private report

Email [email protected] with the subject “Security report”. Include the affected URL, a concise description, and the potential impact. Ask us to agree a suitable channel before sharing sensitive evidence.

Keep the report safe

Use the minimum evidence necessary. Do not access other people’s information, disrupt services, or publish sensitive details. Stop if you encounter personal data.

Testing requires permission

This reporting channel does not authorize security testing, establish a bug bounty, or offer a legal safe harbor. Obtain written permission before undertaking testing.