Responsible Disclosure
Vulnerability disclosure
Report vulnerabilities with reproducible detail for fast triage.
- Recognised
- Researcher credit
- Coordinated
- Disclosure process
- <24h
- Initial triage target
- Severity-based
- Response priority
What to include
Reproduction steps
Provide clear, deterministic steps and affected routes or APIs.
Impact statement
Describe user risk, exploitability assumptions, and possible blast radius.
Proof material
Attach logs, screenshots, or payloads with sensitive data redacted.
Programme guardrails
No user harm
Do not access funds, data, or accounts you do not control.
Good-faith testing only
Use the minimum validation required to prove a security issue.
Collaborative remediation
Work with security engineers on patch validation and disclosure timing.
Security contact lanes