Resources
Contact Security
How to reach WebCastle about a security question, a vulnerability report, a customer security review or a privacy enquiry.
Reaching the WebCastle security team
Security enquiries go to a monitored mailbox rather than a general contact form, so they reach the people accountable for security at WebCastle directly.
Choose the route that matches your enquiry. Each opens an email with a subject line already set, which helps WebCastle route and prioritise your message.
Choose a route
Security question
General questions about WebCastle’s security practices, controls or this Trust Center.
security@webcastle.inAcknowledged within 2 business daysVulnerability report
Report a suspected vulnerability in a WebCastle property or a service WebCastle operates.
security@webcastle.inAcknowledged within 2 business daysCustomer security review
Security questionnaires, vendor due diligence, documentation requests and procurement reviews.
security@webcastle.inResponse within 5 business daysPrivacy question
Questions about personal data, data subject requests, or WebCastle’s role as a processor.
security@webcastle.inAcknowledged within 2 business daysSomething else
Anything security-related that does not fit the categories above, including suspected incidents.
security@webcastle.inAcknowledged within 2 business days
Response times shown are good-faith targets for initial acknowledgement, not contractual service levels. Contractual notification and response obligations, where they apply, are governed by your agreement with WebCastle.
What to include
- Who you are
- Your name, organisation and — if you are an existing customer — the WebCastle project or service concerned.
- What you need
- The specific question, control area or document. Precise requests are answered faster than general ones.
- Your timeline
- If your security review has a deadline, say so. WebCastle will tell you honestly whether it can be met.
- For vulnerability reports
- Affected asset, a description of the issue, reproduction steps and any proof of concept. See the vulnerability disclosure page for the full guidance.
Not a security enquiry?
For commercial, project or general enquiries, use WebCastle’s main contact channels rather than the security mailbox.