Trust and Security

Vulnerability disclosure

If you believe you have found a security vulnerability in SessionBrief, please report it privately to alex@sessionbrief.com. Please include the affected URL or feature, a description of the issue, steps to reproduce, and any supporting proof of concept that is safe and non-destructive.

We ask that you:

• Avoid accessing, modifying, or deleting data that does not belong to you.
• Avoid actions that could degrade service availability, including denial-of-service testing.
• Avoid social engineering, phishing, or physical attacks.
• Give us a reasonable opportunity to investigate and remediate before public disclosure.

SessionBrief does not operate a public bug bounty program at this time. We appreciate responsible disclosure reports that help us improve the security and privacy of the platform.