Security Contact

Use this page to report potential security vulnerabilities and to access information about our reporting channels, coordinated vulnerability disclosure policy, and related security contact resources.

Report a Potential Security Vulnerability

Please use the form below to describe a potential security issue in a structured way. Only provide information necessary for assessment, reproduction, and follow-up communication.

Optional, but useful if we need to contact you about your report.
Please do not submit unnecessary personal data or unrelated sensitive information.

Security Reports

Published security-related notices and coordinated disclosures are listed here:

https://erminas.com/security-report/

CVD Policy

Our coordinated vulnerability disclosure policy describes our expectations, reporting framework, and the general handling of incoming reports:

https://erminas.com/cvd-policy/

Machine-Readable Security Information

Our machine-readable security contact information is published at:

https://erminas.com/.well-known/security.txt

OpenPGP Keys

Public OpenPGP keys for encrypted communication will be published here once available:

  • https://erminas.com/pgp/psirt-public.asc
  • https://erminas.com/pgp/csirt-public.asc
  • https://erminas.com/pgp/securitytxt-signing-public.asc

Note

This page is intended exclusively for reporting potential security vulnerabilities and related coordination. It does not replace general support, sales, or other contact channels.