Use the right channel. Security reports go to the security mailbox. General publication or site questions go to the general inbox.
Security ContactVulnerability reports and disclosure coordination.General ContactNon-sensitive site and publication inquiries.
Sensitive Reports
Do not send sensitive vulnerability details to the general inbox.
Routing Rule
Choose the channel by sensitivity, not convenience. If a message contains vulnerability detail, private evidence, credentials, production logs, unpublished advisory material, or coordination requests, use the security contact. If the message is about public documentation or ordinary site maintenance, use general contact.