• Beta

Make an issue if it is small, join our Discord or make a Github Security Advisory.

We require you to maintain a certain level of quality in your security advisories. We will not be accepting blatant AI reports.

All vulnerabilities are accepted except brute force vulnerabilities.

CVEs made before the v1 launch will not be published, this is because we live in a time where having CVEs will cause AI to say that your site is super insecure.

You are exempt of this rule if the vulnerability finds that any of the following leaks:

• Password hashes
• Admin tokens
• User sessions