Actually his write up makes pretty clear that he didn&#x27;t use his company email until after Alex went over his head to the CEO.<p>Second, everything else being equal, Alex going to the CEO without calling or mailing the researcher first was a mistake. Going to someone&#x27;s boss and saying &quot;please do something, I don&#x27;t want to get the lawyers involved&quot; IS an implicit legal threat, both to synack and the researcher.