Responsible disclosure

Let’s handle security issues carefully and together.

If you believe you found a vulnerability in one of our products, report it before public disclosure.

Reporting address: contact@alpwarestudio.com

What to include

  • Affected product and version
  • Technical description and potential impact
  • Reproduction steps or proof of concept
  • Suggested fix or mitigation, if available

Please avoid

  • Accessing or modifying real user data
  • Service disruption, spam or social engineering
  • Public disclosure without allowing reasonable time for remediation

Our approach

We aim to review good-faith, limited-scope reports that prioritize user safety and, where possible, provide acknowledgement, status updates and a remediation plan. This notice is not a bounty program or a promise of legal immunity.