Security

Report a vulnerability

Please email hello@rhizae.studio rather than opening a public issue. We will acknowledge your report within five business days.

Please do not test destructively against production, access data that does not belong to you, or disrupt the service. If you are unsure whether a test is safe, describe the concern without carrying it out.

What to include

• The affected page, feature, dependency, or workflow
• Steps to reproduce the issue safely
• The potential impact
• Screenshots or logs, where relevant and safe to share
• A suggested fix, if you have one