Reporting a security issue

If you believe you have found a security problem in Traction Advisory, use our contact form. Please include enough detail for us to reproduce it. We will acknowledge your report within two business days and keep you informed while we investigate.

Please do not access, change or download other people's data while testing, and give us a reasonable opportunity to fix the issue before disclosing it publicly. We do not currently offer a paid bounty.

Traction Advisory is a small practice. Reports are read by the whole team during business hours — there is no 24/7 security desk.

Security researchers can also find these details in our security.txt.