Long story short I’ve never reported a bug or exploit to a company before. I have found a very simple (non technical) exploit for door dash. Any tips on disclosing that? I’m not trying to extort anyone of course, and its nothing major, a small service for free essentially. I want to disclose it appropriately to their IT (waiting for them to email me after asking customer support how to get in touch to report issues with security). Truthfully I just want the recognition and perhaps the ability to put something about it on any future resumes since I am very interested in IT security.