1. Reporting a Vulnerability
If you believe you've found a security issue on this site, email security@example.com with enough detail to reproduce it. Please do not access other travellers' data or disrupt the service while testing.
2. What to Expect
We acknowledge reports within three working days, keep you informed while we fix confirmed issues, and credit reporters who wish to be named. We do not pursue good-faith researchers who follow this policy.