Skip to main content

Use the security channel. Keep evidence minimal. Encrypt sensitive material.

Channel​

Include​

  • Affected product or component.
  • Authorization basis.
  • Minimal evidence.
  • Coordination status.
Limit

This channel does not authorize testing. Do not send weaponized exploit code, credentials, or unnecessary production data.

Minimum Report Shape​

A useful report states where the issue was observed, why the activity was authorized, what impact is plausible, what evidence supports the claim, and what material has intentionally been omitted for safety. PCL may decline reports that depend on unauthorized access, unnecessary sensitive data, or disruptive testing.