Security Disclosure

Send private vulnerability reports to terimus@seedenv.com with the subject "SeedEnv Security Disclosure".

Report Details

Include the affected route, reproduction steps, expected and observed behavior, and the potential impact. Redact passwords, tokens, payment details, and other users' personal information. Do not publish exploit details before coordination.

Testing Boundaries

Limit testing to your own accounts and data. Do not disrupt service, access another person's records, perform denial-of-service tests, or attempt financial transfers. This disclosure channel does not authorize otherwise prohibited activity or promise a bounty.

Operational Status

Live platform health is published on the SeedEnv status page. Machine-readable contact details are available at /.well-known/security.txt.