Report
Provide the affected surface, observed behavior, reproduction details and contact route.
TRUST · RESPONSIBLE DISCLOSURE
Report the issue without turning it into an incident.
Mediator provides a defined route for good-faith vulnerability reporting. This page is not authorization to conduct active testing outside an existing written scope.
OVERVIEW
Disclosure and testing are different permissions.
Researchers can report suspected vulnerabilities. Active testing, exploitation, persistence, data access or disruption still requires separate written authorization.
Protect data
Do not access, retain or disclose unnecessary third-party or customer information.
Avoid impact
Do not disrupt service or expand access beyond what is necessary to describe the suspected issue.
Coordinate
Mediator will acknowledge, triage and coordinate remediation disclosure where appropriate.