A responsible route for security disclosure.

Report a vulnerability

Use the contact route and clearly mark the enquiry as a security report. Include the affected address, what you observed, safe reproduction steps and a way to contact you.

Do not access more data than necessary, disrupt the service, use social engineering or publish exploit details before a safe resolution path has been agreed.

What happens next

We will triage the report, preserve relevant evidence and coordinate remediation with the responsible service provider where required. This policy does not authorise access to third-party systems, personal data or private Care Circle Intelligence services.