Report a security issue responsibly.
The current public scope is this marketing website and its request API. Proposed product connectors, repository access, and build environments are not publicly available services.
Last reviewed: 11 September 2026Before testing
This page is not blanket authorization to test MyDataNinja, Cloudflare, third-party services, or any system you do not own. Do not access other people’s data, degrade service, use denial-of-service techniques, send malware, perform social engineering, or retain information beyond what is needed to report an issue.
If testing would go beyond ordinary non-destructive use of the public website, request written scope first through the form below.
What to include
Describe the affected URL, observed behavior, minimal reproduction steps, impact, and any action already taken. Do not include live credentials, unnecessary personal data, or public disclosure deadlines. We do not promise a response time, bounty, safe-harbor protection, or eligibility payment.
Pre-release product security direction
Any future pilot involving source code or customer data must define repository scope, least-privilege access, short-lived credentials, environment lifecycle, human approvals, logging, retention, model providers, and incident handling before operation. This is a design requirement, not a claim that those controls are deployed today.