Counter Plane greatly appreciates reports related to potential security issues with our products and systems. In order to report a security issue please email us at security@counterplane.com. Please be aware that Counter Plane does not currently operate a Bug Bounty programme.

If reporting a security issue, please encrypt the email and any associated attachments using our PGP public key.

Please do not contact us report issues related to the following:

• Issues which require Self-XSS to exploit.
• Missing or misconfigured SPF, DMARC, DNSSEC, or CAA records.
• Missing HTTP security headers (without demonstrated impact).
• Missing cookie flags (without demonstrated impact).

For general enquires please email us at info@counterplane.com.