Buildbot

As an open source project, most communication about Buildbot is done in the open:
If you have a discovered a security-related issue in Buildbot, please see the ReportingVulnerabilities page for the project's disclosure process.
For other matters which absolutely cannot be handled in the open, you may contact the maintainer, Dustin J. Mitchell, directly at dustin@v.igoro.us.