Security
Report a security issue.
agentcentral processes Amazon seller data for authorized customers. If you believe a vulnerability, unauthorized access path, or data exposure affects the service, tell us promptly.
Report
Use the subject line Security report.
Tracking
We acknowledge the report, open a restricted incident record, assess scope and severity, contain credible risk, and provide material status updates through resolution.
Scope
This process covers the website, dashboard, hosted service, authentication, integrations, and the handling of Amazon seller data.
Include only what we need
- A concise description of the issue and its potential impact.
- The affected page, endpoint, feature, or integration.
- Safe reproduction steps, timestamps, and any relevant request or error identifiers.
- Your preferred contact method for follow-up.
Do not send secrets or customer exports
Never send passwords, API keys, OAuth tokens, connector URLs, full customer exports, payment-card data, or other credentials by email. If we need additional evidence, we will arrange a secure, scoped way to collect it.
How we respond
- We validate the report and determine whether it affects customer or Amazon information.
- We limit exposure by revoking or restricting affected access where needed, then preserve the minimum evidence required for investigation.
- We remediate the cause, verify the fix, and record the outcome.
- For actual or suspected security incidents involving Amazon information, we follow our Amazon Ads incident-response process and notify Amazon through its required security channel.
Responsible reporting
Do not access, modify, or exfiltrate customer data; disrupt the service; or test beyond what is necessary to demonstrate the issue. We welcome good-faith reports and will work with you to understand and resolve them.
Last updated July 28, 2026