Responsible security reporting

If you believe a Squad Coders-owned website or endpoint has a security issue, please contact us privately.

How to report

Use our contact form, choose “Something else,” and start your message with Security report:. Include the affected URL, steps to reproduce using non-sensitive test data, and an impact summary.

Do not include passwords, exploit payloads, customer records or private data in the initial form. Ask us for an appropriate secure channel if evidence is sensitive.

Safe testing

Do not attempt denial-of-service, social engineering, bulk scanning, destructive changes, data exfiltration or tests against third-party systems without authorization. Do not publicly disclose details before discussing a remediation window with us.

What happens next

We will assess the report, confirm scope and coordinate a responsible next step where applicable. This page does not establish a paid bug bounty or a guaranteed response deadline.

Policy applies to first-party Squad Coders web properties only. Third-party providers should be contacted via their own reporting programs.