We triage reports about security issues through our bug bounty program. To be invited to the program, please email security@reverb.com and we will respond within two business days. If you believe you have discovered a critical vulnerability, please indicate that in your email.