Security & Abuse Reporting

Send a private report

Use the contact below or our support form with the subject Security report. Include the affected Huck URL or feature, the time, reproduction steps using your own test data, likely impact and a way to reach you. Do not include passwords, private keys or unnecessary customer information. Ask for a secure transfer method before sending sensitive evidence. For account compromise, revoke affected credentials through your workspace where possible.

Keep testing within authorized boundaries

Use accounts and systems you control. Do not access another customer’s records, perform denial-of-service attacks, social-engineer staff, change someone else’s data or persist access. If you encounter information unintentionally, stop, minimize what you retain and report it privately. This page does not authorize testing third-party providers or override their policies. Contact us to agree a testing scope if you are unsure.

What happens next

We will assess the report, seek clarification if needed and work to address confirmed issues. We cannot promise a fixed response or resolution time for every report. Please give us a reasonable opportunity to investigate before disclosure that would expose users. Good-faith reports made within authorized boundaries are welcome; we do not offer a paid bug bounty or immunity from third-party claims through this page.

Use support for abusive assistant behavior, unauthorized content or an incorrect response. For immediate danger, contact the appropriate emergency service; Huck’s support channel is not an emergency response service.