Security

Report website vulnerabilities responsibly.

Adept AI is pre-release. We publish the controls that exist and do not imply audits, certifications, service levels, or product security guarantees that have not been verified.

Current website posture

Forms validate and limit accepted fields server-side
Submissions are stored in a non-public D1 database
No public submission-list or record-read endpoint exists
No file uploads, checkout, product credentials, analytics, or advertising pixels
Honeypot fields reduce basic automated form abuse

Safe-harbor boundaries

Test only this public website and only in ways that do not access other users’ data, degrade service, create excessive traffic, or bypass hosting-platform authentication. Do not test third-party services or the proposed desktop product without separate written authorization.

We do not promise a response or remediation deadline. Avoid collecting unnecessary data and stop when you have enough evidence to report the issue.

Security report

Include safe reproduction steps and likely impact. Do not include passwords, API keys, unrelated personal information, or weaponized proof of concept.

Stored securely

The report is written to the same non-public database class as other site submissions and is not returned by a public endpoint.