Report a security issue

Send suspected vulnerabilities affecting ALT-F1’s website or services to security@alt-f1.be. Please keep vulnerability details out of public issue trackers while we investigate together.

What to include

• The affected URL, product and version, if known.
• A short description, reproducible steps and the potential impact.
• A minimal proof of concept with personal data, credentials and tokens removed.
• An address where we can contact you to coordinate the investigation and disclosure.

Keep testing proportionate

• Use your own accounts and data.
• Avoid service disruption, social engineering, accessing other people’s data or changing production records.
• Stop if you encounter personal information and report the location without copying it.
• This page does not grant authorization to test systems owned by customers or other third parties.

Coordinating a report

ALT-F1 reviews reports through its private security mailbox and coordinates remediation with the relevant maintainers or service owners. Agree a publication plan with us before sharing technical details. Do not email secrets or sensitive customer data; ask for a suitable exchange method first.

Email the security team · security.txt

Last updated: 9 November 2026.