We take our security very seriously and welcome any responsible disclosure of potential gaps in our systems. Indeed is an active supporter of the ethical hacking community. As part of that commitment, we fund a public bug bounty program.
You can sign up at Bugcrowd and submit your finding. The Bugcrowd team will review your submission and payout according to the guidelines of the program. The details are available at the link above.