Intake Channel
Use security@forgeorbital.com with a non-sensitive summary first.
Security Report Intake
Report a vulnerability.
Email a non-sensitive summary first. Forge will acknowledge the report, assign a tracking reference, and coordinate an appropriate protected channel before sensitive proof is exchanged.
Do not include customer data, classified material, export-controlled material, credentials, or destructive proof in the first email.
Submit a non-sensitive summary first. Forge will coordinate the appropriate secure follow-up path after triage begins.
Send the initial report
Email security@forgeorbital.com with a short, non-sensitive summary. Include your name and organization if you want them recorded, the affected Forge URL or asset, safe reproduction steps, and your estimated impact. Do not attach exploit material, credentials, customer data, or regulated data to the first message.
Forge uses your contact details only to triage and respond to the report; see the privacy notice. The acknowledgment assigns the Forge Security Report Number and provides the next-step channel when additional evidence is needed.
Policy
Testing must remain non-destructive and within the responsible disclosure policy.