Responsible Disclosure Policy

Keeping customer data safe and secure is our top priority. If you've discovered a security vulnerability, please do not share it publicly.

Reporting a security vulnerability

To report a vulnerability, please submit the details of the issue through our security response form. We will confirm all legitimate reports and quickly fix the problem.

Guidelines

• Avoid data deletion, unauthorized data access, and service disruption while testing the vulnerability you found.
• Provide enough information for us to reproduce the issue.
• Do not access or modify, or attempt to access or modify, data that does not belong to you.
• Do not execute, or attempt to execute, a Denial of Service (DoS) attack.
• Do not send, or attempt to send, unsolicited or unauthorized email, spam or other forms of unsolicited messages.
• We do not offer compensation for your report.

Policy source: http://support.postmarkapp.com/customer/portal/articles/1317130-responsible-disclosure-policy