Contact
Talk to Conformant.
Pick the lane that fits and leave a work email. A human replies, usually within one business day.
Security contact
Vulnerability reports, grade disputes, and re-scan requests go to security@conformant.io. Machine-readable details live in /.well-known/security.txt, and the full coordinated-disclosure process is documented in the disclosure policy. Demonstrated false positives are corrected within 48 hours with an anchored retraction.