Report a vulnerability
Send a concise report to security@schoolconnection.co.uk. Include the affected address or service, what you observed, steps that allow us to reproduce the issue and a safe way to contact you.
Do not include exploit details in public posts, contact unrelated school staff, access more data than necessary to demonstrate the issue, disrupt the service, or use social engineering, denial-of-service or destructive testing.
What happens next
We will triage a report, preserve relevant evidence and coordinate remediation with the responsible service provider where required. We may ask for additional detail and will avoid disclosing the report publicly before a safe resolution path is agreed.
This policy does not authorise access to third-party systems, private intelligence, personal data or services outside School Connection’s control.