Report vulnerabilities, suspicious activity, exposed data, or abuse.

Suspected account compromise or suspicious sign-in behavior

Possible vulnerability in the platform, API, billing, or lab workflow

Accidental exposure of learner, billing, or operational data

Abuse, phishing, impersonation, or harmful platform activity

Cloud lab security issue, cleanup failure, or unexpected resource exposure

Responsible disclosure or security research contact

Do not include passwords, API keys, private keys, session cookies, or one-time codes.

You receive an acknowledgement with a reference ID after the form is accepted.

High-impact vulnerability and data-exposure reports are triaged within one UK business day.

Lower-risk security questions are reviewed within two UK business days.

Include the affected URL, approximate time, browser, account email, and safe reproduction notes.

For vulnerabilities, describe impact and evidence without accessing other users' data.

Security messages route to security@cloudforgeacademy.co.uk for urgent trust review.