Security

Report a vulnerability

We welcome reports from security researchers and clients. Act in good faith and we will work with you.

Disclosure policy

Do not access, modify or delete data that is not yours.
Do not run denial-of-service, social-engineering or physical tests.
Give us reasonable time to fix an issue before public disclosure.
We acknowledge within two business days and will not pursue legal action against good-faith research that follows this policy.