Please include
Affected asset, reproduction steps, realistic impact, relevant timestamps, and a safe way to contact you. Avoid accessing unrelated data or degrading service.
Responsible disclosure
Report a security concern safely.
Public record
A verified security mailbox and PGP key must be supplied before a formal disclosure channel or security.txt is published. Until then, do not send exploit details through the general consultation form.
What to expect
Response targets, safe-harbor language, supported languages, disclosure timelines, and scope will be added only after the organization formally approves them.