Report a vulnerability

Gmail welcomes reports of security issues in our products.

Where to send it

kiril.u+uat@gmail.com

Scope

This policy covers products and services published by this organisation.

Safe harbour

We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to respond before disclosing.

What to expect

We acknowledge reports within 5 working days.

Report it here

Or use the address above, whichever you prefer.

This page is also published as security.txt per RFC 9116.