Any site vulnerabilities you find can be reported to Cobalt's vulnerability disclosure email address at security@cobalt.io.