Submit Dossier - JEDI-SEC | Security Research & Digital Defense

JEDI SECURITY // SECURE INTAKE

Submit a dossier, lead, or piece of evidence

No account needed. Every submission goes to a private editorial queue and is reviewed by people. Nothing is published automatically.

Verify claims. Protect systems. Preserve evidence. Share knowledge.

Choose a submission type

Investigative Dossier A structured investigation into a person, organization, or event, with sources and a timeline. Select Selected
Cybersecurity Incident Breaches, exposures, defacements, campaigns, and other incidents affecting a system or organization. Select Selected
Government & Public Records FOIA responses, court filings, procurement records, and other official documents. Select Selected
Media & OSINT Leads Open-source observations, news leads, imagery analysis, and published reports worth a closer look. Select Selected
Evidence & Corrections Corrections, rights of reply, or new evidence for an existing case or published report. Select Selected

Investigative Dossier

Fields marked “required” must be completed. Everything else is optional — share only what you are comfortable sharing.

Details

Investigation title (required)

Subject or organization (required)

Detailed summary (required)

Timeline of events

One event per line, with dates where known.

Geographic location

Supporting source URLs

One URL per line. Links are stored as text and never fetched automatically.

Verified facts versus allegations

List what you have verified yourself separately from what is alleged or suspected.

Photographic evidence (optional)

Up to 5 images · JPG, PNG, or WebP · 10.0 MB each. Originals are preserved byte-for-byte, including hidden metadata such as GPS location. Remove metadata first if you do not want to share it.

Drag images here, or

Choose images Description for image 1 (optional) Description for image 2 (optional) Description for image 3 (optional) Description for image 4 (optional) Description for image 5 (optional)

Contact (optional)

Contact email

Only if you want editors to be able to reach you. Consider an address that does not identify you.

Email me when the public status changes (no content is ever included).

Agency referral (optional)

JEDI Security may forward a copy of this submission to a relevant government agency or authority. Some referrals are sent automatically when a report clearly matches an agency’s remit. JEDI Security keeps the original record.

Submission guidelines

Share only information you are entitled to share, and separate what you have verified from what is alleged or suspected.
Prefer public records and primary sources. Include links where you can; we never fetch them automatically.
Do not upload passwords, credentials, private keys, session tokens, malware, exploit code, or step-by-step attack details.
Do not submit material obtained by breaking into systems or accounts, and avoid personal data about private individuals unless it is essential.
Images must be JPG, PNG, or WebP. Originals are preserved for verification and are never published automatically.
Every submission is reviewed by people. Submitting does not guarantee an investigation, publication, referral, or reply.

I have read the submission guidelines and the privacy statement, and this submission contains no credentials, malware, or material I am not entitled to share. (required)

Cybersecurity Incident

Do not upload credentials, passwords, API keys, session tokens, private keys, malicious payloads, exploit code, or vulnerability details that could endanger an affected system. Describe the impact, not the attack steps.

Fields marked “required” must be completed. Everything else is optional — share only what you are comfortable sharing.

Details

Incident title (required)

Affected organization or system (required)

Discovery date

Type of incident (required)

Public technical references

Advisories, CVE entries, vendor notices, or public reporting. One URL per line.

Description of observed impact (required)

Responsible-disclosure status (required)

Supporting screenshots

Up to 5 images · JPG, PNG, or WebP · 10.0 MB each. Originals are preserved byte-for-byte, including hidden metadata such as GPS location. Remove metadata first if you do not want to share it.

Drag images here, or

Choose images Description for image 1 (optional) Description for image 2 (optional) Description for image 3 (optional) Description for image 4 (optional) Description for image 5 (optional)

Contact (optional)

Contact email

Only if you want editors to be able to reach you. Consider an address that does not identify you.

Email me when the public status changes (no content is ever included).

Agency referral (optional)

Submission guidelines

Share only information you are entitled to share, and separate what you have verified from what is alleged or suspected.
Prefer public records and primary sources. Include links where you can; we never fetch them automatically.
Do not upload passwords, credentials, private keys, session tokens, malware, exploit code, or step-by-step attack details.
Do not submit material obtained by breaking into systems or accounts, and avoid personal data about private individuals unless it is essential.
Images must be JPG, PNG, or WebP. Originals are preserved for verification and are never published automatically.
Every submission is reviewed by people. Submitting does not guarantee an investigation, publication, referral, or reply.

I have read the submission guidelines and the privacy statement, and this submission contains no credentials, malware, or material I am not entitled to share. (required)

Government & Public Records

Fields marked “required” must be completed. Everything else is optional — share only what you are comfortable sharing.

Details

Government agency (required)

Jurisdiction

For example: federal, state, county, city, or country.

Record or FOIA request number

Document description (required)

Event dates

Public document URLs

Investigative relevance

Supporting photographs or screenshots

Up to 5 images · JPG, PNG, or WebP · 10.0 MB each. Originals are preserved byte-for-byte, including hidden metadata such as GPS location. Remove metadata first if you do not want to share it.

Drag images here, or

Choose images Description for image 1 (optional) Description for image 2 (optional) Description for image 3 (optional) Description for image 4 (optional) Description for image 5 (optional)

Contact (optional)

Contact email

Only if you want editors to be able to reach you. Consider an address that does not identify you.

Email me when the public status changes (no content is ever included).

Agency referral (optional)

Submission guidelines

Share only information you are entitled to share, and separate what you have verified from what is alleged or suspected.
Prefer public records and primary sources. Include links where you can; we never fetch them automatically.
Do not upload passwords, credentials, private keys, session tokens, malware, exploit code, or step-by-step attack details.
Do not submit material obtained by breaking into systems or accounts, and avoid personal data about private individuals unless it is essential.
Images must be JPG, PNG, or WebP. Originals are preserved for verification and are never published automatically.
Every submission is reviewed by people. Submitting does not guarantee an investigation, publication, referral, or reply.

I have read the submission guidelines and the privacy statement, and this submission contains no credentials, malware, or material I am not entitled to share. (required)

Media & OSINT Leads

Fields marked “required” must be completed. Everything else is optional — share only what you are comfortable sharing.

Details

News or intelligence topic (required)

Location

Event date

Public sources

Description of observations (required)

Confidence (required)

Uncertainty and open questions

What remains unconfirmed, and what would change your assessment?

Related published reports

Supporting images

Up to 5 images · JPG, PNG, or WebP · 10.0 MB each. Originals are preserved byte-for-byte, including hidden metadata such as GPS location. Remove metadata first if you do not want to share it.

Drag images here, or

Choose images Description for image 1 (optional) Description for image 2 (optional) Description for image 3 (optional) Description for image 4 (optional) Description for image 5 (optional)

Contact (optional)

Contact email

Only if you want editors to be able to reach you. Consider an address that does not identify you.

Email me when the public status changes (no content is ever included).

Agency referral (optional)

Submission guidelines

Share only information you are entitled to share, and separate what you have verified from what is alleged or suspected.
Prefer public records and primary sources. Include links where you can; we never fetch them automatically.
Do not upload passwords, credentials, private keys, session tokens, malware, exploit code, or step-by-step attack details.
Do not submit material obtained by breaking into systems or accounts, and avoid personal data about private individuals unless it is essential.
Images must be JPG, PNG, or WebP. Originals are preserved for verification and are never published automatically.
Every submission is reviewed by people. Submitting does not guarantee an investigation, publication, referral, or reply.

I have read the submission guidelines and the privacy statement, and this submission contains no credentials, malware, or material I am not entitled to share. (required)

Evidence & Corrections

Fields marked “required” must be completed. Everything else is optional — share only what you are comfortable sharing.

Details

Existing case URL or identifier (required)

A JEDI case reference (JEDI-CASE-…) or the URL of the published report.

Type of correction or supporting evidence (required)

Explanation (required)

Original reference

The statement, paragraph, or claim being corrected or supported.

New primary sources

Supporting photographs

Up to 5 images · JPG, PNG, or WebP · 10.0 MB each. Originals are preserved byte-for-byte, including hidden metadata such as GPS location. Remove metadata first if you do not want to share it.

Drag images here, or

Choose images Description for image 1 (optional) Description for image 2 (optional) Description for image 3 (optional) Description for image 4 (optional) Description for image 5 (optional)

Contact (optional)

Contact email

Only if you want editors to be able to reach you. Consider an address that does not identify you.

Email me when the public status changes (no content is ever included).

Agency referral (optional)

Submission guidelines

Share only information you are entitled to share, and separate what you have verified from what is alleged or suspected.
Prefer public records and primary sources. Include links where you can; we never fetch them automatically.
Do not upload passwords, credentials, private keys, session tokens, malware, exploit code, or step-by-step attack details.
Do not submit material obtained by breaking into systems or accounts, and avoid personal data about private individuals unless it is essential.
Images must be JPG, PNG, or WebP. Originals are preserved for verification and are never published automatically.
Every submission is reviewed by people. Submitting does not guarantee an investigation, publication, referral, or reply.

I have read the submission guidelines and the privacy statement, and this submission contains no credentials, malware, or material I am not entitled to share. (required)

Check submission status

Enter both your case reference and your private tracking token. Neither works on its own.

Privacy and confidentiality

What we store. The information you type into the form, any images you attach, the time we received it, and an optional contact email if you choose to give one. Images are kept byte-for-byte so they can be verified, which means any metadata inside them (camera model, date, and sometimes GPS location) is preserved privately. You do not need an account, and we do not link submissions to WordPress accounts.

What we do not store. We do not save your IP address with your submission. To limit automated abuse we keep a short-lived, one-way signal derived from it, which expires within 48 hours and cannot be reversed into your address.

Who can see it. Only JEDI Security editors and reviewers with authorised accounts. Nothing you submit is published automatically. If you give consent, a copy may be referred to a relevant government agency or authority; your contact email is only included in a referral if you separately allow it.

How long we keep it. Submissions that are rejected are permanently deleted after 365 days. Accepted and archived submissions are kept as part of investigative records.

Limits of confidentiality. We use reasonable technical safeguards, but no online service can guarantee absolute anonymity or confidentiality, and submitting here does not create legal privilege. Your network, device, browser, or hosting providers may record that you visited this site. If your safety depends on anonymity, use a device and network not associated with you, remove metadata from images before uploading, and leave out details that identify you.

Review before sending

Review before sending

Review before sending

Review before sending

Review before sending