Report a vulnerability.
If you have found a security issue in PixPax, our platform, our website, or the Content Credentials (C2PA) we attach to the images and videos we deliver, please tell us. We read every report.
[email protected]What to include
What you found, where, and how to reproduce it. Screenshots, request logs or a proof of concept help us move faster. Write in English or Swedish.
What you can expect
We acknowledge reports within two business days, keep you updated while we work on a fix, and are happy to credit you once it is resolved if you wish.
Ground rules
Please give us reasonable time to address an issue before disclosing it publicly, and do not access or modify data that is not yours. We will not pursue legal action against good-faith research that follows these rules.
Content Credentials
PixPax is a C2PA conformant generator product (record 01a10a3f-780a-7cb4-bcf4-8992db217cb9, Assurance Level 1). Our claim-signing key is held only by the service that signs deliveries, and every signature carries a trusted timestamp. If you find a vulnerability that affects our signing, report it to [email protected]. More on our provenance page.
Machine-readable contact
Contact details in the RFC 9116 format: /.well-known/security.txt.