Security & Vulnerability Disclosure Policy

We take security seriously.

Please report genuine vulnerabilities to [email protected].

We do not operate a bug bounty program.

Automated scans, theoretical issues, and best-practice suggestions are out of scope.