Report a vulnerability

Codewerk encourages responsible reporting by individuals and organisations who have experienced a security issue in our products or services or discovered a potential security vulnerability.

Please provide sufficient details to allow Codewerk to reproduce and validate the issue. Where possible, include the following:

• Contact information for follow-up communication
• Affected product or service, including software version
• Technical description of the vulnerability
• Reproduction steps
• Initial impact assessment (e.g. CVSS)
• Proof of concept, network traces, screenshots or other evidence

Codewerk will acknowledge receipt of vulnerability reports usually within five business days. Each report is handled following Codewerk’s standard process, which includes initial triage, coordination and disclosure.