Responsible disclosure

How to report

Email security@breachforecast.com [confirm mailbox exists] with a description of the issue, steps to reproduce, and any proof of concept.

In scope

• breachforecast.com
• The BreachForecast customer portal

Safe harbour

[DRAFT — legal review] We will not pursue action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to fix issues before disclosure.

Our response

We acknowledge reports within [confirm response time].