Website statement
Responsible disclosure
Report suspected website vulnerabilities directly to Conduit.
How to report
Email pgregotski@conduit512.com with the affected URL, a concise description, reproduction steps, and the minimum evidence needed to explain the issue. Do not include secrets or personal records in the initial message. Ask for an appropriate channel if sensitive evidence is needed.
Safe boundaries
Do not disrupt availability, access or alter another person's records, attempt social engineering, or test third-party services. If you encounter sensitive information, stop and report without exploring further. This policy does not grant authorization to access systems or promise compensation.
Coordination
Coordinate further testing and disclosure directly with Conduit. No third-party disclosure-program relationship, bounty, or fixed response deadline is claimed.