Report a security issue.
Found a suspected vulnerability in our public website or first-party APIs? Tell us privately so we can investigate without exposing visitors or customer data.
Email a security reportEnough detail to investigate. No sensitive data.
Use test data and the minimum activity needed to demonstrate the issue. A concise report helps us reproduce it without unnecessary access or disruption.
- 01The affected URL or component
- 02Minimal steps that reproduce the issue
- 03What you expected and what happened
- 04The potential impact, without personal data or credentials
Keep the test limited to our systems.
Third-party services have their own disclosure channels. Please avoid activity that could harm availability or expose someone else's information.
In scope
- The public PandaCodeGen website
- Its first-party API routes
- Minimal, non-destructive verification using test data
Out of scope
- Third-party services and accounts
- Social engineering or denial-of-service testing
- Traffic that degrades the service or access to another person's data
A clear reporting path.
Reports are triaged by severity and reproducibility. We keep the communication private while the issue is assessed.
- 01
Send it privately
Email the report to info@pandacodegen.com with the subject Security report. Please do not publish details in an issue or social post while we investigate.
- 02
We assess the report
We review reproducibility, affected systems and potential severity. We may ask for clarification using the contact details you provide.
- 03
We share material updates
We use your contact details for relevant updates. This public page does not promise a fixed response or remediation deadline.
Ready to send the report?
Use the subject “Security report” and include only the details needed to reproduce the issue safely.
info@pandacodegen.com