Helpful report
Include the affected URL, likely impact, safe reproduction steps and a way to contact you. Begin the contact message with “Security disclosure”.
Responsible disclosure
Report a security issue safely.
IR35Careers welcomes reproducible, good-faith vulnerability reports. There is not currently a paid bug-bounty programme, and this page does not promise a reward.
Stop at user data
Do not access another person's account, retain personal information, degrade the service, send spam, upload malware or test third-party providers.
Coordinated response
A reproducible report is triaged, relevant evidence is preserved and disclosure is coordinated until a proportionate fix protects users.
Machine-readable policy
Security tooling can discover the reporting route at /.well-known/security.txt. It contains no credentials or private contact data.