Guidelines for responsible security vulnerability reporting and our commitment to protecting your data.
Building secure systems through community collaboration
We will investigate legitimate reports and make every effort to quickly resolve any vulnerability. To encourage responsible reporting, we will not take legal action against you nor ask law enforcement to investigate you providing you comply with the following guideline:
Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our services.
This email address is monitored by our technical team and will receive priority attention for security-related issues.
We'll confirm receipt of your report within 24 hours
Our team will assess and reproduce the issue
We'll develop and implement a fix
We'll notify you when the issue is resolved
While we encourage responsible security research, the following activities are not permitted:
We appreciate the security research community and recognize responsible researchers who help us improve our security posture. Depending on the severity and impact of the vulnerability:
We take security seriously and are here to address any concerns or questions you may have.
Emergency Security Issues: For critical vulnerabilities that pose immediate risk to user data or system security, please mark your email as "URGENT" and we will respond within 4 hours.