Security · Coordinated disclosure
Report a security issue responsibly.
The final disclosure inbox is not configured yet; no address is invented here.
What to include
- A clear description and affected version
- Safe reproduction steps
- Expected impact
- Any suggested remediation
What not to include
Do not send raw card data, customer payment payloads, passwords, or unrelated personal information. Avoid destructive testing, privacy violations, or access to data that is not yours.
The final disclosure address is a launch blocker.
Pre-launch · Be ready before the next burst
Put a control between checkout abuse and your payment gateway.
Checkout Firewall is being prepared for release. No download or paid checkout is live yet.