# Report a security problem

> Found a vulnerability in brokerandagent.com, a website we host or our apps? How to report it, what to include, and what we'll do.

If you've found a security problem in brokerandagent.com, a website we host or one of our apps, please tell us. Email [security@brokerandagent.com](mailto:security@brokerandagent.com).

## What to include

- What you found, and where: the page or address it's on.
- The steps to reproduce it.
- What someone could do with it.
- How to reach you.

Please give us a fair chance to fix it before telling anyone else.

## What we'll do

- Confirm we have your report.
- Keep you updated while we work on it.
- Credit you for finding it, if you'd like.

## Our security.txt

Our contact for security reports is also published in the standard `security.txt` file (RFC 9116), at [brokerandagent.com/.well-known/security.txt](https://brokerandagent.com/.well-known/security.txt). It's good until October 1, 2027.

## Not a vulnerability?

- **Someone may be in your account.** Use **This wasn't me** in the new-device email, or sign out everywhere in **Account → Security**, then change your password. See [Sessions and signing out](https://brokerandagent.com/help/account/sessions).
- **A problem with your website or account.** Email [support@brokerandagent.com](mailto:support@brokerandagent.com).
- **A request about your data.** Email [privacy@brokerandagent.com](mailto:privacy@brokerandagent.com).

---

Source: https://brokerandagent.com/help/security/report-a-security-problem