What to include
A useful report helps us reproduce and assess the issue.
- Affected URL, feature, or system
- Clear reproduction steps
- Observed and expected behavior
- Potential impact and supporting evidence
Private reporting
Report a security concern
Share enough information for us to understand and investigate a suspected vulnerability without exposing other people’s data or disrupting a service.
Protect people and systems
Do not access, alter, download, retain, or disclose data that is not yours. Avoid denial of service, social engineering, destructive testing, automated abuse, and actions that reduce availability.
What happens next
We review credible reports, clarify missing context when possible, assess the issue, and determine an appropriate response. Submission does not guarantee a reward, public acknowledgement, or a specific resolution time.