Security
Vulnerability reports
There is no bug bounty and no payment for a report. There is no promised response time. The security@ mailbox does not receive mail yet. This page has no form. Send a report through the contact form. That message is stored for 12 months, and an email alert is sent through Resend. Do not post an exploit in a public place.
Effective date
Effective October 2, 2026.
- October 2, 2026. This page has no form. A report goes through the contact form, which stores the message for 12 months. security@ still does not receive mail.