IronSights

Responsible disclosure · Security

Report a
vulnerability.

Found a security issue in one of our websites or services? We appreciate coordinated disclosure. Send us the details below and our security team will take it from there, no public issue required.

1

Acknowledgement

We confirm receipt within 2 Australian business days.

2

Triage & resolution

We aim to validate and fix confirmed issues within 14 days.

3

Coordinated disclosure

Please hold off on public disclosure until we've had a chance to respond.

Helpful to include

  • A clear description of the vulnerability
  • Steps to reproduce it
  • The potential impact
  • Any proof-of-concept, logs or screenshots

Prefer email, or need to send something the form can't carry? Write to security@ironsights.com.au with "Security disclosure" in the subject line.

Confidential intake

Disclosure details

Protected by honeypot · Cloudflare Turnstile · Rate-limited