Responsible disclosure
Report a security issue in our own public systems in good faith.
Further operating facts
Hours, telephone, insurance, panels and similar claims are published only when they can be evidenced. They are omitted here rather than guessed.
Please do not test against client systems, only against our own public assets, and do not access data beyond what is needed to demonstrate the issue.
Do not send malware samples, exploit chains against third parties, or personal data belonging to someone else. This page is for issues in malwareanalysis.app and related public infrastructure we operate.