We welcome security reports, and will list public reports (with acknowledgements) on our sites.
For issues in our commercial Canary product, kindly see https://canary.tools/.well-known/security.txt for our reporting address and keys.
For our Open Source projects, please use Github's reporting tool (quick links: Canarytokens, and OpenCanary).