Report a security issue

Good-faith reports are welcome. Email contact@catchmed.co.uk with a concise description, the affected page or feature, and safe reproduction steps. Do not include personal data you do not own.

Please do not access another person's account or data, exfiltrate data, use destructive techniques, disrupt the service, use automated high-volume testing, bypass access controls, send emails, change records, or publicly disclose an unresolved issue. Use only accounts and data you control.

CatchMed will acknowledge reports where possible, assess their impact, and prioritise proportionate fixes. This is not a paid bug-bounty programme and no reward is promised.