Security
Report a security issue
Found a vulnerability in FedXchange or this website? Tell us here. We reply by email.
What to send
- What you found, and where: the page, feature, or address
- The steps to see it for yourself
- What someone could do with it
Please don't
- test against other people's accounts or data, or try to reach another agency's data;
- overload, scrape, or disrupt the service;
- put other people's personal information in your report.
The Security page explains what this covers and how we handle reports.