Effective date: 19 October 2026 · Last updated: 19 October 2026
We assess reports according to risk and available evidence. Submit only necessary information and never include passwords, access tokens or unrelated personal data.
1. Reporting channel
Email [email protected] with “Abuse Report” in the subject, or sign in and submit a technical-support ticket. For an immediate threat to personal safety, contact local emergency services or law enforcement first.
2. Useful evidence
Provide the date, time and timezone, relevant ZTProxy IP or connection details, destination, description, relevant logs or screenshots, and a contact email. Redact credentials and unrelated personal information.
3. How we respond
We first acknowledge receipt and assess urgency, then preserve necessary evidence, investigate relevant records and, depending on risk, restrict resources, contact an account holder or comply with legal process. We normally begin assessing high-risk reports within 24 hours and other reports within three business days. These are intake targets, not promises of resolution or compensation. Privacy and investigation integrity may prevent us from disclosing account information or every action taken.
4. Good-faith reports
Do not send false, retaliatory or bulk irrelevant reports. Good-faith security researchers should avoid accessing, changing or retaining data that is not theirs and allow reasonable time for investigation.