Responsible Disclosure
We encourage responsible disclosure and coordinated remediation.
Email suspected vulnerabilities to: security@charitywater.example
Include reproduction steps, impact details, and affected URL paths.
Do not access or modify user data while testing. We will acknowledge submissions and coordinate fixes.