Security
Report GOAT or GOAT Connect vulnerabilities privately. Connect is an invite-only beta limited to 50 users.
Updated 28 October 2026
Delete GOAT Connect account
Operator and contact
GOAT Connect is operated by 김병준 (Kim Byungjun), who also handles security incidents. For privacy requests, account deletion, support or abuse reports, email:
How to report a vulnerability
Email the contact above in Korean or English. 김병준 (Kim Byungjun) is the incident owner. Include the affected component and version, a description of the impact and minimal steps to reproduce. Use a subject such as GOAT security report. Do not include live credentials, private conversations or other users' data.
Do not publish exploit details in a public issue before we can assess and coordinate a fix. If you encounter exposed personal data, stop accessing it and describe where you found it without copying it into your report. We will work with you on disclosure timing; the beta has no guaranteed response or remediation deadline and no promised bounty.
Research boundaries
Use your own accounts and environments, or obtain explicit permission from their owners. Do not access another person's data, disrupt service, run destructive tests or use social engineering. This page does not authorize testing of third-party providers or systems you do not control.
If your account or environment is at risk
Contact us promptly, secure your sign-in and recovery methods, and revoke affected access on your own environments. Connect sign-in can grant control of linked machines. Signing out alone is not a guarantee that existing environment sessions have ended. The operator coordinates incident response; this page does not claim that every planned beta security control is already deployed.