Before submitting vulnerability information here, please read our vulnerability disclosure policy (VDP) at https://www.flashvote.com/vulnerability-disclosure-policy.

• We only accept vulnerability reports through this form for certain systems; these are listed in our VDP.
• We also accept emails at security@flashvote.com and can engage in back-and-forth conversation there.
• We do support TLS-encrypted emails for vulnerability reports, but only when the sending email client and provider support the same. If you are not sure if your email provider and client support TLS encryption, use this TLS-encrypted form for particularly sensitive information.

When you choose to share your contact information with us, we commit to coordinating with you as openly and as quickly as possible.

• Within 3 business days, we will acknowledge that your report has been received.
• To the best of our ability, we will confirm the existence of the vulnerability to you and be as transparent as possible about what steps we are taking during the remediation process, including on issues or challenges that may delay resolution.
• We will maintain an open dialogue to discuss issues.