Contact us by email.
Contact: security@psiphon.ca Preferred-Languages: en
We will only respond to credible vulnerability reports. They must contain enough detail that we can tell they are serious and legitimate.
We do not have a formal bounty program, but any significant vulnerability report will be considered for reward.