Coordinated Disclosure
Report a security or privacy issue
Terra Flora Global LLC is committed to maintaining the security and integrity of Terra PPC. We investigate all credible reports of potential vulnerabilities, privacy concerns, or data incidents.
What You May Report
- Suspected software or infrastructure vulnerability
- Potential unauthorized access or privilege escalation
- Suspected Amazon data misuse or scoping anomaly
- Data privacy concern or accidental disclosure
- Account authorization or OAuth workflow concern
What to Include in Your Report
To assist our engineering team in rapid evaluation and remediation, please provide:
- Detailed description of the suspected issue
- Affected URL, API path, or product functionality
- Step-by-step reproduction steps (where safe to perform)
- Estimated severity and potential operational impact
- Your contact information for coordinated communication
Responsible Conduct Principles
We request that all security researchers adhere to standard responsible disclosure ethics:
- Do not access, alter, or download another customer's data
- Do not exploit an issue beyond the minimum necessary to demonstrate proof-of-concept
- Do not perform destructive testing, denial-of-service (DoS), or brute-force attacks
- Do not use phishing, social engineering, or physical security attacks
- Do not publicly disclose or publish private customer information
Submit Your Security Finding
You may report findings securely using our contact form with the Security category selected, or via our published security email.