Security
Find Rocks uses invite-only accounts, encrypted transport, least-privilege service access, and monitored infrastructure to protect research work.
Report a vulnerability
Submit a private report through the repository's security-advisory channel. Include the affected URL, a concise reproduction, and the potential impact. Do not include credentials or personal data in the report.
Open a private security advisorySafe research
Do not test against production accounts or data, attempt persistence, or access information beyond what is necessary to demonstrate an issue. Good-faith reports will be investigated promptly.