You're welcome to report vulnerabilities privately to HelioHost with the email address admin@heliohost.org, and we will fix them if possible, but since we're a non-profit organization operating on donations our policy is to provide no financial reimbursement for any reports that we receive. If you'd like your name to be listed on our website as recognition for the work you've done to help us let us know. Thanks.