Responsible disclosure

Report privately

Email security@ourelectedusa.com with a concise description, affected URL, reproduction steps, and likely impact. Do not include credentials or personal data unless specifically requested through a secure channel.

Research boundaries

Do not access data you do not own, disrupt service, degrade availability, evade rate limits, exfiltrate information, or use social engineering. Stop testing once you have enough evidence to report the issue.

What to expect

We will acknowledge actionable reports when a monitored security mailbox is operational, investigate in good faith, and prioritize fixes by demonstrated impact.