Security reporting
Report a security concern privately.
Security research is valuable when reported responsibly. Use Rhea's official security email for potential vulnerabilities or questions about our published security boundaries.
How to report
Provide enough detail to reproduce the issue.
- 01
Describe the issue
Explain the affected Rhea product or page, the expected behavior and what you observed.
- 02
Share safe reproduction details
Include a minimal sequence, version or environment details and any non-sensitive evidence that helps investigate.
- 03
Keep the report private
Avoid public disclosure before a reasonable opportunity to assess the concern. Do not access, modify or exfiltrate anyone else's data.
- 04
Use the security channel
Send the report directly to the official Rhea security contact. Please do not include passwords, private keys or customer datasets.
Responsible boundaries
No implied testing permission or bounty.
Do not run disruptive scans, denial-of-service tests, social engineering, persistent access, or destructive experiments. This page does not offer a public bug bounty, safe-harbor commitment or guaranteed response time.