Contact
Reach the lab
Minimal public contact surface. No forms, no trackers, no newsletter.
Disclosure scope
Security contact expectations
Security reports should include the affected URL, reproduction steps, observed impact, and whether the issue appears to expose private data, authentication, infrastructure control, or mail identity. Do not send secrets, credentials, or exploit payloads that are not required to explain the issue.