Security
Report a security concern
Responsible reports help us protect the Income Recon website and authenticated lender workspace.
How to report an issue
Email security@incomerecon.com with the affected page, the steps needed to reproduce the issue, the expected security impact, and a way to contact you. Screenshots are welcome after passwords, session values, and personal information have been removed.
Protect people and service availability
- Do not submit applicant, borrower, or other personal information.
- Do not access, alter, download, retain, or disclose another person's account or information.
- Do not use denial-of-service, automated high-volume traffic, social engineering, physical attacks, or testing that interrupts the service.
- Stop testing and report the issue if you encounter information that is not yours.
Authorization
This page provides a reporting channel; it does not grant authorization to test Income Recon, its hosting providers, or any connected service. We will review good-faith reports and may request more information.