Please provide us with a secure email of yours to report security vulnerabilities,
Btw, It’s unacceptable that security researchers have to go through such hoops to contact a vendor of security software.
Standard contact emails are defined by RFC 2142.
As the author of security software, naturally the relevant mailbox is present and monitored.
I welcome any and all information about the security of the software I’ve written, and I will respond in kind to any issue reported via standard best practice.
No contact to date - closed topic.