Contact us by email.
Contact: [email protected] Preferred-Languages: en
We will only respond to credible vulnerability reports. They must contain enough detail that we can tell they are serious and legitimate.
We do not have a formal bounty program, but any significant vulnerability report will be considered for reward.