If you find a weakness in the platform, tell us. We thank everyone who reports in good faith, and we take no legal action against good-faith research that follows these rules.
How to report
The reporting address is published here when the platform launches.
What we need
- The page or endpoint, and the steps that show the problem.
- What an attacker could do with it.
- A way to reach you if we have a question.
The rules
- Do not look at other people's data beyond what proves the problem; do not keep or publish it.
- Do not disrupt the service or flood it with requests, and do not send messages to users.
- Give us time to fix the problem before you speak about it in public.
What we do
We answer every report, tell you what we found and when it will be fixed, and name you once it is fixed if you wish.
Home page