I have also done this, but instead by finding someone from IT or security on LinkedIn and messaging them there.