Security & Responsible Disclosure

01Reporting a concern

PathForge Studio values the work of the security community. If you believe you have found a security concern relating to a PathForge-controlled public system, we encourage you to report it responsibly using the details below.

02Information to include

To help us review a report, please include where possible:

• The affected page or system
• A clear description of the concern
• Steps to reproduce
• The potential impact

03What not to send

04Good-faith reporting

We ask that you act in good faith, avoid harming systems or data, avoid privacy violations, and give PathForge a reasonable opportunity to review a report before sharing it publicly.

05Response expectations

We intend to review good-faith reports and to respond where appropriate using the contact information you provide.

06Excluded testing

Certain activity is not authorised — for example testing that could disrupt services, degrade performance, access other users’ data, or involve social engineering. Please do not perform such testing.

07Client-owned systems

Some websites and systems are owned or controlled by clients rather than by PathForge. A concern involving a client-owned system may need to be routed through the relevant support process.

08Sensitive data

If a report necessarily involves sensitive data, please describe it rather than sending it, and wait for guidance on how to share details safely.

09Contact

Use the details below to report a security concern. Existing clients can also use Existing Client Support for account-related matters.