Vulnerability Disclosure Policy

We take the security of our systems and data seriously. We value the role of independent security researchers and appreciate your help in keeping our environment safe. If you believe you have found a security vulnerability, we encourage you to report it to us immediately.

Reporting Process

Please report any potential vulnerabilities to our designated security contact. To protect sensitive information in transit, we request that you encrypt your report using our public PGP key.

• PGP Key: Download Public Key

Please include detailed steps to reproduce the vulnerability, a description of the potential impact, and any proof-of-concept scripts or screenshots.

Out of Scope

To protect our infrastructure and users, we explicitly ask that you do not engage in the following testing methods:

• Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks.
• Social engineering (e.g., phishing, vishing) against our employees, contractors, or users.
• Physical attempts to access our property, data centers, or devices.
• Destructive testing, deleting data, or modifying data that does not belong to you.
• Automated vulnerability