Found a security problem? Please tell us.

• Anything sensitive (a vulnerability, exposed data, or an account or access issue): report it privately. Email app@q-summit.com, or use GitHub's private "Report a vulnerability" button on this repository. Please do not put sensitive details in a public issue.
• General security questions or hardening ideas: open an issue (the website change request template fits), or use the private channel above when unsure.

We aim to reply within 5 working days, keep you updated while we work on a fix, and credit you when it is resolved unless you prefer to stay anonymous.

The most valuable reports concern the CMS admin panel, editor accounts and their per-division access boundaries, and the integrity of the published site. Useful reports include impact, steps to reproduce, and affected pages or files.