Include enough detail
Provide the affected URL or component, reproduction steps, impact, timestamps and a safe proof that avoids personal data.
Security · responsible disclosure
Help us protect product and personal data
Report suspected vulnerabilities privately through the configured security contact or the contact form topic “security”. Do not access data that is not yours, alter records or publish a finding before coordinated remediation.
Open security contactSafe testing
Use your own account and fictional demo records. Automated scanning that degrades availability or bypasses access controls is not permitted.
Response and credit
The team records receipt, triage and remediation status. Credit is optional and never requires disclosure of identity beyond what is needed to communicate.
Ready for a concrete next step?
Try the data-readiness assessment, inspect the live demo or talk to the team about your catalogue.
Open security contact Check readiness