Security Disclosure
If you discover a vulnerability, please follow these steps:
Do not publicize the issue.
Send a detailed report to: [email protected]
Include reproduction steps, impact assessment, and suggested mitigation.
If you prefer encrypted communication, provide your PGP key; our public key will be posted here.
Bug bounty
We may offer rewards for valid reports — details depend on severity.
Response policy
Acknowledge receipt within 3 business days.
Provide regular updates until resolution.
Last updated