Reporting a problem
Please report security vulnerabilities in proofcan.com, the Proofcan marking engine (engine.proofcan.com) or the files they produce by email to support@proofcan.com.
Use the same address to report a C2PA non-conformance: for example, a Proofcan-signed file whose Content Credentials fail validation, or a manifest that does not follow the C2PA specification.
What to include
- Affected address: the URL or API endpoint, or the lookup ID of the marked file.
- Steps to reproduce: what you did, what you expected and what happened. Attach the file or a validator report if the problem concerns a marked image.
- Date and time: when you observed the problem, with the time zone.
Testing
Please do not access, change or delete other people's data, and do not run tests that degrade the service for others.
Machine-readable contact: /.well-known/security.txt