Report Security Concerns

How to report

Found a vulnerability? Email our security team with steps to reproduce, impact and any proof-of-concept. Please avoid accessing other users' data or disrupting the service while testing.

What happens next

• We acknowledge reports within two business days.
• We triage, fix and keep you posted on timelines.
• Coordinated disclosure: please give us reasonable time before going public.

Scope

In scope: our websites, APIs and hosted apps. Out of scope: third-party services, social engineering and physical attacks.