Report an issue
Email security@sendarq.com with SendArq security report in the subject. Include the smallest safe reproducible description, affected public path, approximate UTC time, and safe visible result.
Keep the report safe
Do not access another person's data, disrupt service, publish details before we can investigate, or send passwords, session cookies, OAuth values, recipient data, uploaded originals, or private message content.
Response
We will review good-faith reports through the owner-operated support channel. No bug-bounty reward or safe-harbor program is promised.