Security is treated as an operating responsibility throughout design, delivery and support. Public descriptions do not disclose sensitive control configurations.
Responsible reporting
If you believe you have found a vulnerability, do not access, alter or remove data and do not disrupt services. Send a clear description, affected URL, reproduction steps and supporting evidence to the published security contact. Allow reasonable time for investigation before disclosure.
No authorisation
This notice does not authorise testing that violates law, privacy, contracts or service availability.