Report a security vulnerability
If you believe you have found a security vulnerability in STREAM Cloud or the STREAM Connect Agent, please report it privately to:
This inbox is monitored by MOYAFLOW's product-security team.
Include in your report
Please provide, where available:
- A short description of the vulnerability and its potential impact
- The affected product, version, tenant, or deployment
- Reproduction steps or a proof of concept
- Relevant timestamps, request identifiers, or log excerpts
- A safe contact method for follow-up
Do not include passwords, access tokens, private keys, or other sensitive customer information in the initial report. Redact sensitive values from screenshots and logs.
Responsible testing
Please avoid actions that could access, alter, or delete another customer's data; degrade service availability; or create lasting changes. Stop testing and contact us if you encounter real customer data or a production-impacting condition.
MOYAFLOW will assess the report, coordinate follow-up, and communicate when we have relevant remediation or mitigation information. Please do not publicly disclose a vulnerability before we have had an opportunity to investigate and coordinate a response.