Report a suspected website issue privately.
This reporting channel does not authorize testing. Stop if you encounter sensitive information.
How to report
Email security@leftoutsecurity.com with the affected URL, concise description, reproducible non-destructive steps, observed impact, and a safe way to contact you. Do not include secrets or personal information that is unnecessary to understand the issue.
Safe-reporting boundary
Do not access other users' information, use social engineering, disrupt service, perform denial-of-service activity, deploy malware, exfiltrate data, test third-party services, or retain sensitive information. This page and the machine-readable contact are reporting channels only.
What to expect
Reports are reviewed and prioritized based on reproducibility and impact. Acknowledgment or remediation timing cannot be guaranteed. Please allow reasonable time to investigate before public disclosure.
Machine-readable contact
The security contact is published at /.well-known/security.txt.