Responsible Disclosure
Report a Security Issue
Found a security weakness in a KVUC website or system? Tell us privately so we can fix it before anyone misuses it.
Guidelines
When looking for or reporting a weakness, please:
- only test against your own account and data;
- not view, change, copy or delete other users' data;
- not disrupt the service (no denial-of-service or load testing);
- not use phishing, social engineering or physical access;
- give us reasonable time to fix the issue before telling anyone else.
What we do
We acknowledge reports within 5 working days, keep you informed through the tracking page and credit you if you wish.
We will not take action against anyone who reports in good faith and follows these guidelines.
Our contact details for researchers are also published in
security.txt.
Send your security report
Fields marked * are required. You will get a reference number as soon as you send the form.