[email protected]

Send vulnerability reports to the same address. Email is handled as described in the privacy policy.

For sensitive information, use the PGP key on the security page. An unsigned email is not proof of the sender’s identity.