Trust & Safety
Report a security problem
If you think you have found a security weakness in tickts, please tell us. We read every report and work with the person who sent it to understand and fix the problem.
Email us with "Security" in the subject:
Tell us what you found, the page or address it is on, the steps that show it, and what someone could do with it. Please leave other people's personal details out of your email.
While you look, please
- Test only with accounts and events that are yours.
- Never open, change or delete anyone else's account, tickets, orders or data. If you come across any by accident, stop there and tell us.
- Do not slow the site down or disrupt it: no load testing, flooding or automated scanning at volume.
- Do not buy, refund or transfer real tickets to test something.
- Do not try to trick our team, organisers or buyers into giving you access.
- Give us a fair chance to fix the problem before you tell anyone else about it.
What happens next
We confirm we have your report, look into it, and tell you what we found and when it is fixed. If we need more detail, we ask.
Not covered here
- Problems in services we use, such as Stripe, PayPal or Cloudflare. Please report those to them.
- Reports that only list a missing setting or best practice, with no way it could be used against tickts or its users.
