Security policy

Last updated 29 September 2026

If you find a security issue in SOAR, please tell us privately before sharing it anywhere else.

Reporting

Reply to your SOAR invite email with a description of the issue, the version you tested (Settings → About), and steps to reproduce it. We'll acknowledge your report and keep you updated while we fix it.

Scope

• The SOAR desktop app and its update feed.
• This website and its waitlist.

Issues in third-party agent providers (such as Claude Code or Codex) should go to those providers directly.

Please don't

• Access, change or delete data that isn't yours.
• Run denial-of-service or load tests against our services.