# Security and disclosure

How to report a security issue to Vraelis, the rules for testing, and what not to send through a public form.

## Report a security issue

Email `help@vraelis.com` with Security report in the subject. Say what you found, the address where it happens, and how to see it. A person reads every report.

1. Test only systems you own or are authorized to test, and stop as soon as you can show the problem.
2. Do not open, change or keep anyone else's data. If you reach some by accident, tell us and delete it.
3. Give us a reasonable chance to fix it before you publish anything.

| Field | Value |
| --- | --- |
| Contact | `help@vraelis.com` |
| Policy | [vraelis.com/security#report](https://vraelis.com/security#report) |
| Preferred-Languages | en |
| Expires | 30 September 2027 |

## What not to send

Keep credentials, classified material, restricted technical data and sensitive operational information out of public contact forms. Describe the system and the problem at a level you are authorized to share.

## What exists today

Vraelis Contour exists as a controlled synthetic ONNX CPU experiment with a read-only evidence app. The site offers no self-service account, production API or operational deployment, and a contact submission does not grant access. Research topics, design intentions and local tests are not certifications.

---

Vraelis documentation, Vraelis. https://docs.vraelis.com/security-and-disclosure