# Security

## Cryptography Whitepaper

The algorithms and design decisions behind the cryptography are documented in the
[Cryptography Whitepaper](https://threema.ch/press-files/2_documentation/cryptography_whitepaper.pdf).

## Reporting Vulnerabilities

If you discover a security issue in Threema, please adhere to the coordinated vulnerability
disclosure model. To be eligible for a bug bounty, please
[file a report on GObugfree](https://app.gobugfree.com/programs/threema) (where all the details,
including the bounty levels, are listed). If you’re not interested in the bug bounty program, you
can contact us via Threema or by email; for contact details, see
[threema.ch/contact](https://threema.ch/contact) (section “Security”).
