Responsible reporting helps protect everyone.

Report a security concern

Email details to [email protected]. Include the affected product or website, a clear description, reproduction steps and any relevant evidence. Please avoid including personal data or live credentials unless we specifically request them through a secure channel.

Responsible disclosure guidance

• Do not access, alter, download or destroy another person’s data.
• Do not disrupt services, use denial-of-service techniques or perform excessive automated testing.
• Use only accounts and information that you own or have explicit permission to test.
• Give us reasonable time to investigate and address the issue before public disclosure.
• Tell us promptly if you accidentally encounter personal or sensitive information.

We will acknowledge a credible report when practical, assess it and communicate appropriate updates. This page does not create a bug bounty programme or promise payment.