Trust · Responsible disclosure
Help us investigate security issues safely.
Do not access data that is not yours, disrupt service, use social engineering or retain unnecessary personal information. A dedicated public security-reporting address is not configured in the website record yet.
01 / Trust · Responsible disclosure
Include enough to reproduce safely.
Record the affected URL or component, impact, reproduction steps, relevant timestamps and a minimal proof. Redact credentials, tokens, customer data and unrelated personal information.
02 / Trust · Responsible disclosure
Limit the test.
Stop when impact is demonstrated. Do not persist access, modify evidence, exfiltrate data, degrade availability or test another person's account.
03 / Trust · Responsible disclosure
Reporting channel pending
The final security contact, acknowledgement target, incident triage ownership and safe-harbour language require operational and counsel review. This page does not promise a response time that has not been staffed and tested.