Vulnerability Disclosure

Email support@agentstructure.ai with the subject line "Security vulnerability". A dedicated security address may be published later. Until then, this mailbox is the intake.

Include the URL, the steps to reproduce, and the impact you believe it has. Please do not include live customer data or your own secrets.

This policy covers the website we publish. It does not authorize testing of third-party platforms, data providers, or networks you do not own. Do not use social engineering, denial of service, or physical access.

We will read the report and reply when we can. We do not publish a bounty or a response-time guarantee. Please give us a reasonable chance to fix a confirmed issue before any public disclosure.

We will not pursue a legal claim against a person who reports a vulnerability in this website in good faith, stays within the scope above, avoids privacy harm and service disruption, and gives us time to remediate. This statement is not a waiver of rights against someone who extorts, destroys data, or attacks third parties.