Rules

Report requirements

1. The incident must be real and have valid public evidence.
2. Do not submit credentials, personal data, payloads, or exploitation instructions.
3. Do not attack systems to create evidence.
4. Pending targets are not published before verification.
5. Administrators may reject or remove risky reports.