Reporting Security Vulnerabilities

We take security vulnerabilities very seriously and work hard to provide a secure online experience for our users. If you believe you have discovered a security issue that affects many users, please report it to us so we can investigate and correct the problem.

Don't abuse other users when testing. You can use your own account or create sockpuppet accounts, but do not test or demonstrate your theories on (or at the expense of) your unsuspecting peers.

To report a security vulnerability that affects many users, please fill out this form:

Contact Form

Choose "Other" as the type and include the words "Security Vulnerability". Be as detailed as you can in the steps required to reproduce the error. Please do not post serious security issues publicly on a meta site or elsewhere.


Hall of Fame

We are extremely grateful to members of the security research community who have reported serious security vulnerabilities to us directly. While we cannot always reveal what the vulnerability was, we do want to recognize their contributions publicly.

Year Name Link
2018 Arminius twitter.com/rawsec
2018 ~Ele the HackDemonium~  
2018, 2011-2016 Jeremy Banks jeremy.ca
2018 Arun Babu linkedin.com/in/arun-babu-ab766399
2017 Vineet Kumar twitter.com/the_real_clown
2016-2017 Rene Blogging About .Net and other stuff
2017 Elyesa in der Maur elyesa.nl
2017 Kenny Hietbrink kenny.hietbr.ink
2017 David Albert github.com/DavAlbert
2016 Bhavuk Jain twitter.com/bhavukjain1
2016 Pedro Cardoso twitter.com/@tvmpt
2016 Kamran Saifullah pk.linkedin.com/in/kamransaifullah786
2016 Michał Perłakowski stackoverflow.com/users/3853934/gothdo
2016 Slava Shklyaev slava.sh
2015 Russel Van Laurio facebook.com/russelvan.l
2015 Nadav S. Samet thesamet.com
2013 Reginaldo Silva ubercomp.com
2012 Mathias Bynens mathiasbynens.be
2009-2010 Daniel LeCheminant javascript:$.getScript("http://danlec.com/xss.js")