Responsible disclosure
Security
Found a weakness in this site? Thank you for telling us first.
Note Template text for the Muse & Co. demo. Have your own policies reviewed by a lawyer.
How to report a problem
Use the form below, or write to the address in our security.txt file. Tell us the page or address affected, what you found, and the steps to see it again. Screenshots help.
What we ask
- Give us a reasonable time to fix the problem before you share it with anyone else
- Do not access, change or delete other people's data, and stop as soon as you have shown the problem
- Do not run tests that slow the site down or fill in forms in bulk
What we promise
- We reply within five working days
- We keep you updated while we fix it, and tell you when it is done
- We will not take legal action against good-faith research that follows these guidelines
- With your permission, we will thank you by name once the fix is live
Out of scope
Reports about missing best-practice headers with no real effect, problems on other sites we link to, and anything that needs physical access to a device.