Contact the security team

Please report security issues privately. Give us reasonable time to investigate and remediate before public disclosure. Do not access other users’ data, disrupt service, or exfiltrate materials beyond what is needed to demonstrate the issue.

• Affected URL or API route
• Steps to reproduce
• Impact assessment (confidentiality, integrity, availability)
• Your contact details for follow-up

No public encryption key is published here. Contact security@seracase.ca about a suitable channel before sending sensitive vulnerability details or case information.

• Acknowledgement target: within 3 business days
• Initial severity triage shortly thereafter
• Remediation timeline depends on severity and complexity