How to report a security problem.

• We acknowledge your report within two business days.
• We assess it and tell you what we found.
• A serious problem is fixed as soon as the fix is verified.
• We credit you when it ships, unless you would rather we did not.

In scope: this website and its contact form. Out of scope: anything needing physical access to a device, social engineering, denial of service by volume, and a scanner report with no demonstrated impact. Please do not test against anyone else's data.

The same contact is published at /.well-known/security.txt.