# Reporting Security Issues

Bagisto values the contributions of the security research community and appreciates your efforts to help keep Bagisto and its merchants secure.

## Where Should I Report Security Issues?

If you believe you have discovered a security vulnerability in Bagisto, **please do not** use the public issue tracker and **do not** disclose it publicly.

Instead, you may report security issues through **either** of the following responsible disclosure channels:

- **Email:** Send detailed information to **support@bagisto.com**

- **Support Ticket:** Create a ticket at **[Bagisto Support](https://bagisto.uvdesk.com/en/)**

Both channels ensure that security issues are reviewed promptly and handled responsibly before any public disclosure.

We appreciate your cooperation in helping us maintain a secure ecosystem for all Bagisto users.
