Trust
Security
We welcome good-faith reports about security issues in the si-world website and in Agent Task Manager. Please give us a chance to investigate and fix the issue before public disclosure.
How to report
Email [email protected] with the subject line Security report. If possible, include:
- the affected URL, product version or component;
- a description of the issue and its potential impact;
- clear steps to reproduce, with screenshots or logs if helpful;
- your name or handle, if you would like credit;
- any planned disclosure timeline.
Please do not include passwords, API keys or other secrets in your first message. If sensitive material is needed, tell us and we will arrange a safer channel.
What to expect
- We aim to acknowledge reports within five business days.
- We may ask for more details or a reproduction environment.
- We will keep you informed of our progress where practical.
- We may credit you in a fix announcement if you would like and if it is appropriate.
We do not currently operate a paid bug bounty program. We appreciate every responsible report.
Please avoid
- accessing, modifying or deleting data that does not belong to you;
- disrupting the website or services, including denial-of-service testing;
- social engineering, phishing or physical attacks;
- publicly disclosing the issue before we have had a reasonable chance to respond.
Scope
This policy covers si-world.online and the Agent Task Manager software. Third-party services we use — including GitHub Pages, Cloudflare and Creem — are outside our scope; please report issues in those services to the relevant provider.
Contact
For security questions, email [email protected].