Use the published security contact
Hansec publishes its current security reporting contact and policy references in the standard security file for the website. Check that file immediately before sending a report because contact details and supported protection methods can change.
A product support request, account recovery issue, or service interruption should use Hansec Support. A suspected vulnerability, exposed secret, or security weakness should use the security reporting contact.
What to include
- A clear description of the concern and the affected Hansec or Nova surface.
- The date, time, time zone, and the smallest safe steps needed to reproduce it.
- The observed impact and whether customer information or access may be involved.
- Sanitized evidence that does not expose another customer, live credential, or unnecessary sensitive record.
- A safe way to contact you and any disclosure timing that should be discussed.
Keep testing safe
Do not access another customer's information, disrupt service, change or delete records, run high-volume tests, maintain access, or publish sensitive details while the concern is being assessed. Stop when testing could create harm and report what you observed.