Security disclosure

Report a suspected vulnerability safely.

Use this route for a security weakness in the Cilendo mobile apps, public website, admin portal, APIs, authentication, payments integration, or supporting infrastructure. For account help, safety reports, or payment disputes, use Support.

Responsible reporting

Minimal evidence first.

Do not include passwords, access tokens, payment card data, raw identity documents, or another person's personal data. Submit a concise description first; Cilendo can arrange a safer evidence handoff if more detail is needed.

What to include

  • The affected app, page, endpoint, or feature.
  • Reproducible steps using your own account and data.
  • The security impact and any non-sensitive version details.
  • A safe way for the team to contact you.

Testing boundaries

  • Do not access, change, or retain another person's data.
  • Do not disrupt service, use social engineering, or send high-volume traffic.
  • Stop testing and report promptly if sensitive data appears.
  • No paid bug-bounty programme is offered for Release 1.

Submit a vulnerability report

This rate-limited form creates a case in Cilendo's restricted support queue. Keep a copy of the returned reference. If anyone is in immediate danger, contact local emergency services first.