Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.