Report a vulnerability

Security is our business — including our own. If you believe you have found a vulnerability in leewardprivate.com or any of our services, please tell us.

How to report

Email security@leewardprivate.com. Please describe the issue, the affected address or system, the steps to reproduce it and, if possible, a proof of concept. For sensitive details we can agree on an encrypted channel.

What we ask

• Give us reasonable time to fix the issue before disclosing it.
• Do not access, change or delete data that is not yours.
• No denial of service, social engineering, spam or physical testing.
• Do not test systems of our clients.

What you can expect

We confirm receipt, keep you informed and credit you if you wish. We do not take legal action against good-faith research that follows these rules. We do not run a paid bug bounty programme.

Machine-readable version

Our security.txt under RFC 9116: /.well-known/security.txt