Initial reporting route
Use the general contact form and describe the affected public URL and issue without attaching credentials, personal data, customer information, exploit code, or confidential evidence. The form is not a dedicated, monitored security channel and may not be routed to a security owner.
Keep testing bounded
Do not disrupt service, access or modify another person's data, test systems without authorization, or continue once sensitive information is encountered. This page does not authorize intrusive testing.
Set expectations clearly
No bounty, safe-harbor guarantee, acknowledgement deadline, remediation deadline, or response coverage is offered. Do not rely on the general enquiry route to report an active customer incident; use the agreed incident contact where one exists.