01
Report safely
Describe the affected surface, observed behaviour and potential impact. Do not include credentials, personal data, customer information or live operational data.
Responsible disclosure
We welcome good-faith reports that help us investigate potential security issues.
A formal vulnerability-disclosure scope and safe-harbour policy remain under review. Until published, please use the contact route and avoid accessing customer data or disrupting services.
01
Describe the affected surface, observed behaviour and potential impact. Do not include credentials, personal data, customer information or live operational data.
02
Do not use denial of service, social engineering, destructive testing, persistence, broad automated scanning or access beyond what is necessary to describe the concern.
03
Reports will be routed for review according to apparent risk. No bounty, response time or legal safe harbour is promised unless expressly published.
Trust signals
Enterprise customers can request appropriate assurance information during due diligence. Controlled material is shared according to relevance and confidentiality.