Start with a short description and the affected URL. Do not send passwords, access tokens, customer records, or a bulk data sample. Ask for a secure transfer method if sensitive evidence is necessary.
Open pageSecurity disclosure
Report a Security Vulnerability
Found a possible security issue with this website? Send a private report before sharing technical details publicly.
Where to send a report
Email IRT@defendarm.com with the subject Website security report. This channel is for suspected vulnerabilities in DefendArm's website, not emergency response requests or issues in a client's environment.
What to include
Testing boundaries
This reporting page does not grant permission to test systems. Request written authorization before active testing. It does not cover client systems, supplier infrastructure, or third-party services linked from the site.
Coordination and expectations
Please allow time to assess a report and coordinate any necessary changes before publishing exploit details. Reporting an issue does not guarantee a reward, payment, response deadline, or resolution date. Do not assume a bug bounty is offered unless separately agreed in writing.
Policy details
Published 2026-09-23. The machine-readable reporting contact is available in security.txt.