I welcome reports from security researchers and I'm happy to work with you. If you discover a vulnerability in any of my software or websites, please let me know privately first.

Please practice responsible disclosure: give me a reasonable amount of time to investigate and fix the issue before any public disclosure, and avoid accessing or modifying data that isn't yours while testing.

The best way to reach me is by email — I'll acknowledge your report as quickly as I can.

Email me