Do not publish a vulnerability, exploitation proof, secret or personal data in a public issue, discussion or contribution.
Email security@osint-forge.com. For a personal-data concern, use privacy@osint-forge.com.
Provide only what is necessary:
- the affected surface and observed impact;
- minimal, non-destructive reproduction steps;
- the date, environment and a reply address;
- strictly necessary attachments with secrets and third-party data removed.
Do not perform intrusive testing, exfiltration, persistence or denial of service. Wait for explicit authorization before any validation that may affect the platform or its users.
This documentation repository does not grant authorization to test OSINT Forge. Editorial errors with no security impact may be submitted as ordinary documentation corrections.