Coordinated vulnerability disclosure

Report a security vulnerability

Help us keep MyMedEx and its users safe. Submit one vulnerability per report and include enough evidence for our security team to reproduce and assess it.

Stay in scope

Test only MyMedEx-owned assets and accounts or data you are authorized to use.

Avoid harm

Do not disrupt services, use social engineering, alter data, or access more information than needed to prove the issue.

Protect personal data

Redact credentials, patient information, and medical data. Include only the minimum evidence needed.

Responsible testing and safe harbor

Good-faith, authorized and non-destructive research that follows these rules will be reviewed as responsible security research. This form does not authorize testing of third-party systems.

Researcher information

Name or researcher alias

Contact email

Organization (optional)

Other contact (optional)

Vulnerability details

Report title

Affected asset or endpoint

Evidence and remediation

Proof of concept (optional)

Suggested remediation (optional)

Attach evidenceUp to 5 files; JPG, PNG, WEBP, PDF, TXT, LOG, MD, or JSON. Maximum 10 MB per file and 25 MB total.

Disclosure status

I have disclosed this vulnerability to another person or organization.

Required confirmations

I confirm that my testing was authorized, non-destructive, and limited to the minimum necessary to demonstrate the issue.

I confirm that this report and its attachments exclude unnecessary credentials, personal information, and medical data.

MyMedEx

Back to Home