1
Ask HN: How do I disclose bugs to a company without a bug bounty program?
I recently found bug on a large (publicly traded) company's website that can lead to personal information exposure. The bug allows you to gain a user's phone number and other personal information given only their email address.
What is the best way to contact this company and responsibly disclose these bug? They have no bug bounty program, I cannot find a dedicated email address for the developer team, and I am reluctant to email their customer support. Thanks in advance!