Report a security issue directly to our team.

In scope: the Quantum Connect AI web application, the marketing site at quantumconnectai.com, and the APIs that serve them. Out of scope: third-party services we do not operate, social engineering of our staff or customers, physical attacks, and volumetric denial-of-service testing.

Email security@quantumconnectai.com. Include:

• A description of the issue and its potential impact.
• Steps to reproduce, including affected URLs, parameters, and timestamps.
• Any proof-of-concept output, redacted of third-party data.
• How you would like to be credited, if at all.

We acknowledge reports within one business day. We triage the report, confirm impact, and keep you updated while we remediate. Please give us a reasonable window to fix an issue before any public disclosure.

Our security posture and governance controls are documented in the Trust Center.

• Use only accounts and data you own or are authorized to test.
• Do not access, modify, or exfiltrate customer or dealership data.
• Stop testing as soon as you confirm a vulnerability exists.
• Do not degrade service availability for other users.

We will not pursue legal action against researchers who follow this policy, act in good faith, and avoid privacy violations, data destruction, and service disruption. We do not currently operate a paid bounty program.