Please report security vulnerabilities privately to security@poolside.ai. Do not open a public issue for suspected vulnerabilities. See also our security.txt for more.

We aim to provide an initial response within 14 days.

Include:

• Affected component or version.
• Steps to reproduce.
• Impact and exploitability notes.
• Any suggested mitigation.

We will investigate, confirm impact, coordinate fixes, and publish disclosure details when appropriate. Please give us reasonable time to remediate before public disclosure.

Poolside Assistant does not currently offer a public bug bounty program. If that changes, details will be published here.