It's not security through security because I've discovered their SOAP end points that powered this front end, and from that discovered a ton of other Brierley c

It's not security through security because I've discovered their SOAP end points that powered this front end, and from that discovered a ton of other Brierley clients that are vulnerable to similar issues. Now trying to work out how to make the disclosure to Brierley.