Report a security vulnerability

What to include

Share enough information for us to understand and investigate the issue:

• The affected VAELLA service, page or software version.
• A description of the issue and its potential impact.
• Steps to reproduce it, including any access or configuration needed.
• Sanitised screenshots, logs or a minimal proof of concept, where useful.
• A way to contact you with questions and updates.

Please remove passwords, access tokens and personal or customer data from your report. If sensitive material is needed, contact us first so we can agree how to share it securely.

How we handle reports

We review security reports, assess their impact and prioritise confirmed issues for remediation. We may ask for additional information and will provide updates as the investigation progresses. We track confirmed vulnerabilities through remediation and verification.

Please coordinate public disclosure with us so we can investigate the issue and protect affected users before technical details are published.

Protect people and services

Use only accounts and data you are authorised to access. Avoid accessing, modifying or retaining anyone else's data, disrupting services or testing physical equipment. If you encounter sensitive data, stop and report the issue without collecting further information.

This reporting channel does not grant permission to test customer systems, third-party services or physical equipment. Contact us before any testing that needs explicit authorisation.

Other enquiries

For privacy questions, see our Privacy Policy. For general enquiries, contact VAELLA.