Security & responsible reporting

Send a useful report

Select Report a security issue on the contact form. Provide the affected page, a concise description, safe reproduction steps, expected behavior, and impact. Do not include credentials, private user data, or destructive payloads. Include an email for follow-up and keep the reference returned by the form.

Scope and handling

This page is a reporting channel, not permission to test systems or a promise of bounty payment or legal safe harbor. Obtain explicit authorization for testing. Stop if a test exposes another person’s information or could disrupt service. Supplier, payment, identity, and external viewer systems have their own reporting processes.

Reports enter the private operations queue for review. Do not publish unremediated sensitive details in a public repository issue. No response-time or remediation guarantee is asserted here.