No account needed. We review every report, and close tunnels used for phishing, malware or other abuse.
What you saw and when. For a vulnerability, steps to reproduce. Please don't share it publicly until we've fixed it.
So we can reply. We don't share it with the tunnel's owner.