Report concerns responsibly.

How to report

Use the contact form with “Website security report” selected. Describe the affected URL, what you observed, safe reproduction steps and the potential impact. Do not include credentials or unrelated personal data.

Please avoid

• Accessing, changing, downloading or deleting data that is not yours.
• Disrupting availability, sending high-volume traffic or testing third parties.
• Social engineering, phishing, physical intrusion or privacy violations.
• Publishing details before there has been a reasonable opportunity to investigate and mitigate.

What you can expect

A good-faith report will be acknowledged when reasonably possible and handled discreetly. This page is not a bug-bounty programme and does not promise payment. Safe, proportionate research that follows this guidance is welcomed.

Security contact file

Automated tools can also find the standard security.txt file.