Security and vulnerability reporting

HubPage Australia is a public business platform, so we welcome responsible reports about security or privacy weaknesses that could affect users, businesses, orders, invoices, payments, projects, messages, or private files.

How to report a security issue

Email info@hubpage.com.au with enough detail for our team to reproduce and assess the issue. Include the affected URL or endpoint, your test account role, the steps you followed, the expected result, the actual result, and any harmless evidence such as redacted screenshots or request identifiers.

Safe testing expectations

Use only accounts, businesses, products, services, events, projects, files, and payment methods that you own or have written permission to test. Do not access, change, copy, delete, or disclose another user's data. Do not run denial-of-service tests, destructive scans, spam, social engineering, malware, credential attacks, or tests against third-party systems.

What to avoid sending

Do not send passwords, session tokens, full payment card numbers, private messages, sensitive identity documents, or another person's personal information. If private data appears during a test, stop immediately and report the minimum redacted evidence needed to show the issue.

Response process

We triage security reports by severity, prioritising authentication bypass, cross-user access, payment or invoice manipulation, executable uploads, injection, exposed secrets, and privacy-impacting data leakage. We may contact you for clarification, confirm whether the issue is in scope, and provide a remediation update when practical.

Other support requests

For account help, billing questions, refunds, cancellations, listing issues, or general support, use the contact page instead.