Five routes
Talk to the right person first
A single contact box sends a security disclosure and a billing question to the same inbox, and loses both. Pick the route that matches what you need.
Send an enquiry
Security disclosure
Reporting a vulnerability
Suspected vulnerabilities go through the security route, not general support, so they reach the right people without sitting in a queue.
Please include enough detail to reproduce the issue. We will not pursue action against good-faith research that respects user privacy, avoids service degradation and does not access data beyond what is needed to demonstrate the finding.
A formal disclosure policy and security advisory feed are planned as part of the Trust Center. Until those are published, this route is the correct one.