Home Security & privacy Report a security vulnerability

Report a security vulnerability

Last updated on Sep 17, 2026

Use the security path

If you found a vulnerability in a ForePath product or service, report it to [email protected]. That mailbox is the SOC / Vulnerability Disclosure intake. Do not use general sales chat or billing threads for exploit details.

Also see coordinated vulnerability disclosure materials under forepath.io/legal and any security.txt published for ForePath hosts.

What to send

  • Product and affected URL or component

  • A clear description of the issue and impact

  • Steps to reproduce without attacking other customers

  • Your contact details for follow-up and optional credit

Do not include real customer data, live secrets, or a full public exploit write-up in the first message.

What we do

  1. We aim to acknowledge eligible reports within about 48 hours (published aim, not a contractual SLA unless your contract says otherwise).

  2. We triage severity and track the fix.

  3. We keep details confidential until a fix is available, unless we agree otherwise.

Regulatory filings (when required) are handled separately from this Help article.