Pentest scope, bug bounty, compliance audit, or just "something in prod feels off."
Every message is reviewed by a real security engineer — not an SDR queue.
Usually replies within the same day.
More detail = a sharper first reply. Industry, scale, deadlines, what you've already tried — all useful.