Prohibited activity
- Illegal activity, fraud, abuse, harassment, threats, exploitation, or rights violations.
- Spam, deceptive messaging, credential attacks, phishing, malware, botnets, scraping, or unauthorized data harvesting.
- Unauthorized security testing, vulnerability exploitation, service disruption, rate-limit evasion, or attempts to bypass access controls.
- Misuse of health, research, education, credential, identity, or prototype systems.
- Uploading unlawful, harmful, infringing, malicious, or privacy-violating content.
Responsible security research
Good-faith security reports are welcome when they avoid harm, privacy invasion, persistence, lateral movement, data exfiltration, public disclosure before remediation, or disruption. Use the Security page or Support page for responsible disclosure routing.