Report a security issue

How to report an issue

Email hello@conversec.com with a clear description of the issue, the affected URL, the steps needed to reproduce it, and its likely impact. Please avoid including credentials, personal information, client data, or unnecessary copies of sensitive records.

Responsible testing

Do not access or alter other people’s data, send scorecard emails to third parties, degrade service availability, use social engineering, or perform denial-of-service testing. Use the smallest proof needed to explain the issue and stop if testing could affect another person or system.

What happens next

We will acknowledge useful reports, investigate them proportionately, and coordinate any validation or disclosure that is needed. This policy does not authorise access to systems or data beyond what is necessary for a safe, good-faith report.