Last updated 2026-09-11
Reports are anonymous unless you choose to include contact details. They go directly to the CEO of Hexagon Labs and are handled under our Code of Conduct, which does not allow retaliation against anyone who raises a concern in good faith.
Security researchers reporting a vulnerability can also email [email protected]; see Security at Hexagon for how we handle those reports.