Coordinated vulnerability disclosure policy
How to report a security issue in this website or its publishing studio.
Last updated: September 16, 2026
Scope
This website, its publishing studio and the open-source code they run on.
How to report
Report issues privately through the project’s issue tracker or the contact on the About page. Include steps to reproduce and, where possible, the affected URL. Please do not test against accounts or content you do not own.
What to expect
We acknowledge reports promptly, keep you informed while we investigate, and credit reporters who wish to be named once a fix is published.
Safe harbour
Good-faith research that respects this policy will not be met with legal action by us.