Contact: mailto:security@vibekit.bot
Expires: 2027-07-28T00:00:00.000Z
Preferred-Languages: en
Canonical: https://vibekit.bot/.well-known/security.txt
Policy: https://vibekit.bot/terms

# Reporting a vulnerability
# Please include steps to reproduce and, where relevant, the affected
# subdomain or app id. We do not currently run a paid bounty, but we
# credit reporters who ask to be credited.
#
# Please do not run automated scanners against customer-hosted apps on
# *.vibekit.bot — those are third-party tenants, not our surface.