Trust
Security
Last updated June 23, 2026
Security reporting rules for the public alpha.
Report security issues
Email security@farpy.com with a clear summary, affected URL or endpoint, reproduction steps, and impact. Do not include secrets in screenshots or public posts.
Do not attack production
Do not run destructive tests, denial-of-service tests, credential attacks, social engineering, spam, or tests against other users' files or accounts.
Bounty policy
Farpy does not offer a public bug bounty unless a written bounty program is explicitly published.
Response
We review reports based on risk and public-alpha impact. Include a contact email so we can ask follow-up questions.