We know your business data is extremely important to you, so we’re very protective of it.
Please send urgent or sensitive reports directly to us. Provide us with a secure way to respond. Our entire development staff monitors that email address, and we will acknowledge your message as quickly as possible, typically within 8 hours (and no longer than 24 hours).
We'll work with you to make sure that we understand the scope of the issue, and that we fully address your concern. Please act in good faith towards our users' privacy and data during your disclosure. We won't take legal action against you or administrative action against your account if you act accordingly. White hat researchers are always appreciated.
We'll gladly give appropriate credit for responsible disclosure of significant vulnerabilities.
Special thanks to the following individuals, who have responsibly disclosed vulnerabilities in the past: