Reporting Security Vulnerabilities

We appreciate responsible reports of potential security vulnerabilities. If you believe you have identified a security vulnerability in our applications, systems, or infrastructure, please contact us at myc-security@myclimate.org.
 

•     a description of the issue
•     affected URLs or endpoints
•     steps to reproduce
•     potential impact
•     your contact details, if you would like a reply
   

•     access, modify, or delete data that is not your own
•     perform denial-of-service testing
•     use social engineering
•     publicly disclose the issue before we had reasonable time to investigate