Report a security concern
Last reviewed: 2026-10-16
Report a suspected website vulnerability or an impersonation attempt through our contact page. Use the subject Security report and include the affected URL, a brief description, the likely impact and minimal steps to reproduce the issue. Redact credentials and personal data from screenshots.
Do not access other people’s information, extract data, change or delete records, send disruptive traffic, or test third-party infrastructure. Stop if testing exposes private information. A report is not permission to conduct intrusive testing.
We assess reports and may ask for clarification. We do not currently offer a bug bounty, a guaranteed response deadline or a legal safe-harbour commitment. Ordinary email and social messages are not secure whistleblowing channels; do not send passwords, access tokens or sensitive source material.