Reporting a vulnerability.

If you find a security issue in one of our apps or on this website, please report it to the address below — encrypted if you prefer, and with enough detail for us to reproduce it. We will confirm receipt and come back to you once we can assess it. Please hold off on publishing until the issue is fixed. There is no bug bounty programme.