Responsible disclosure
If you believe you’ve found a security vulnerability on marqata.com — anything from an exposed endpoint to a way to access data that shouldn’t be visible — we want to know about it before anyone else does.
How to report
Email support@marqata.com with a clear description of the issue, the steps to reproduce it, and any relevant screenshots or logs. Use a subject line starting with “Security report” so it reaches us quickly.
What to avoid
Please don’t access, modify, or delete data that isn’t yours, don’t run automated scanning tools against the site without contacting us first, and don’t publicly disclose an issue until we’ve had a reasonable chance to fix it.
What to expect
We’ll acknowledge genuine reports and keep you updated as we investigate and fix the issue. We’re a small team, so response times can vary, but every report is read.