Send it privately

Email security reports to admin@getportico.tv. Don’t open a public issue that contains any of these:

  • An unpatched vulnerability
  • Account data
  • A token or private key
  • A server route
  • Personal media information

What to include

  • The affected Portico component and its version
  • What you expected and what happened
  • The fewest steps that reproduce the problem
  • The security impact
  • Whether you tested against a server, a hosted account, a client or the documentation site

Test safely

Use a test account and non-sensitive media wherever you can. Remove secrets from logs and screenshots before you attach them.

Don’t access another person’s server, account or data while testing.