Responsible disclosure

Initial guidance for security reports related to Prossibr.

Scope

This channel covers issues related to the Prossibr website and its public configuration. It does not authorize testing against Cloudflare, GitHub, referenced services, or third parties.

Before reporting

do not access other people’s data;
do not perform denial-of-service, social engineering, or destructive tests;
do not publish details before remediation;
include minimal reproduction steps and observed impact.

A dedicated contact method will be published after a separate mailbox is created. Until then, do not send sensitive information.