Security
Report a suspected security issue privately.
What to include
Provide the affected URL, a short description, the observed behavior and the minimum information needed to reproduce it safely. Do not send credentials, customer records or unnecessary personal information.
Avoid harm
Do not access another person’s data, disrupt services, test stolen credentials or conduct intrusive testing. Stop if you encounter private information and report only the minimum detail.
Scope of this channel
This page provides a private reporting route. It does not authorize penetration testing, create a bug-bounty programme, promise payment or provide legal safe harbor.