Report a security concern
You can report a suspected vulnerability through our public Contact route without purchasing a product or signing in. Mark it Security report and identify the affected EaseThat service, tool and version.
Describe the issue and the minimum steps needed to understand it. Do not include passwords, access tokens, customer records or exploit payloads in the initial message. Ask us to agree a suitable route before sharing sensitive evidence.
This reporting route does not authorise intrusive testing, accessing another organisation’s data, service disruption or bypassing access controls. No bug bounty or reward is offered by this page. Please avoid public disclosure of sensitive details while we assess the report.
Any contractual incident-notification or support obligations remain governed by the applicable agreement.
EaseThat Assistant