This repository contains documentation only. It ships no code, no dependencies, and no runtime.
Reports about the Praxis substrate itself, about ourpraxis.com, or about anything else under this organization are welcome here even though the code is not public.
Email access@ourpraxis.com with SECURITY in the subject line.
Please include the following.
- what you found, and where
- the steps to reproduce it
- what an attacker could do with it
- anything you already tried that did not work
Please do not open a public issue for a security report, and please give us a chance to fix it before publishing.
We acknowledge reports and tell you what we intend to do about them. If you would like credit for a valid finding, say so and you will get it. There is no paid bounty programme.