Report a website security concern.
Help us understand a problem without putting people, information or services at risk.
Where to report
Send an initial report to enquiries@qadv.com.au with “Website security report” in the subject. Include the affected page, a concise description, when you observed it and safe reproduction steps.
Keep passwords, personal information and confidential client data out of the initial email. If sensitive evidence is necessary, ask us to arrange an appropriate way to receive it.
Keep investigation within your authority
This page is a reporting channel, not permission to test. Do not access or copy other people’s data, disrupt availability, bypass authentication or extend testing into client environments. If you encounter private information, stop and tell us how you reached it without sharing the information itself.
Scope of this channel
Use this channel for the Quokka public website. It is not a client incident-response service or a vulnerability reward programme. Existing clients should use the support and escalation arrangements in their agreement for operational incidents.
A report does not authorise further testing or promise payment, a response deadline or legal protection. Any testing engagement needs an agreed scope and written authority.