Reporting a security vulnerability

How to report

Email [email protected] with:

• a description of the issue and its impact;
• the steps, requests or proof of concept that reproduce it;
• the affected URLs, API endpoints or resources;
• how we can reach you with follow-up questions.

While testing, please

• use only accounts and resources you own, and do not access, change or delete other customers' data;
• not run denial-of-service or load tests, spam, social engineering or physical attacks;
• give us a reasonable time to fix the issue before you disclose it publicly.

Abuse from a server or site we host

Spam, phishing, malware or attacks coming from an IP address or domain on our network are not vulnerabilities in our platform. Report them through the abuse form or to [email protected].