Back to Security

Responsible Disclosure

If you believe you've found a vulnerability, we want to hear it—safely and responsibly.

How to report

Email with:

  • Description of the issue
  • Steps to reproduce
  • Expected vs actual behavior
  • Impact assessment (if known)

Our commitments

  • Timely acknowledgment
  • Clear coordination and status updates
  • Public credit in advisories (with your consent)

What we ask

  • Give us a reasonable window to remediate before public disclosure
  • Do not access or modify data you don't own
  • Avoid actions that degrade services or harm users