threlay
Security
Reporting an issue
If you find a security issue in Develop, Mirror, Proof, or this website, email root@threlay.com with "Security" in the subject. Say which product and version, what you found, and how to reproduce it. Please keep it private until it is fixed.
What happens next
- We acknowledge every report within five business days.
- We tell you what we found and, once it is fixed, which release fixes it.
- Release notes say only "Fixed a security issue." and never how it could be used.
Please don't
- Access, change, or delete anyone's data but your own.
- Degrade the service for others.
There is no paid bounty.