Responsible Disclosure

See a security issue? Report it safely.

We encourage responsible disclosure and coordinated remediation.

Email suspected vulnerabilities to: security@charitywater.example

Include reproduction steps, impact details, and affected URL paths.

Do not access or modify user data while testing. We will acknowledge submissions and coordinate fixes.