Security

To report a potential security vulnerability affecting a Vitko-operated system, email contact@vitko.inc with the subject "Security report."

Include in your report

• The affected hostname, endpoint, or component.
• A concise description of the issue and its potential impact.
• Reproduction steps and supporting evidence that do not contain unnecessary secrets.
• A safe way to contact you for follow-up.

Handling

Please avoid disrupting systems, accessing data beyond what is necessary to demonstrate the issue, or publicly disclosing an unresolved vulnerability. We will review good-faith reports and coordinate next steps through the contact information you provide.

The machine-readable contact record is available at /.well-known/security.txt.