We welcome your reports
The security of our customers is our highest priority. If you believe you have discovered a vulnerability in our Services, we want to hear from you and will work with you to understand and resolve it quickly.
How to report
- Submit your report through our contact page with the topic “Security”.
- Include a description of the issue, steps to reproduce it, the affected endpoint or component and the potential impact.
- Do not include real customer data in your report.
Guidelines
- Test only against accounts you own, and never access, modify or delete data belonging to others.
- Do not perform denial-of-service testing, social engineering or physical attacks.
- Give us reasonable time to remediate before any public disclosure.
- Stop testing and report immediately if you encounter sensitive data.
Our commitments
- Acknowledge your report within two business days.
- Keep you informed as we investigate and remediate.
- Not pursue legal action against good-faith research that follows this policy.
- Recognize your contribution, with your permission, once the issue is resolved.