Security model
Defense in depth, with limits stated plainly.
The platform validates inputs, separates browser and server trust boundaries, blocks scans of private and internal addresses, and redacts secrets from logs.
Responsible reporting
A documented security contact must be published before public launch. This page does not show an unverified contact address or claim an inactive bounty program.