1 min read
Research rules
- Only test in-scope systems.
- Do not access, modify or delete data belonging to others; if you access data accidentally, stop and tell us.
- Avoid testing that could disrupt service (DoS, heavy automated scanning).
- Do not share the vulnerability with third parties until it is fixed.
- Do not attempt social engineering, phishing or physical access.
Safe harbor
We consider good-faith security research that follows these rules to be authorized and will not initiate legal action because of it. If a third party initiates legal action, we will make it known that the research complied with this policy.
Contact
- Security reports
- [email protected]