Security disclosure
Updated October 21, 2026
Report suspected vulnerabilities affecting agentbay.io to hello@agentbay.io. Include the affected URL, steps to reproduce, impact, and minimal supporting evidence. Do not send passwords, tokens, or other people’s personal data.
Responsible reporting
Use your own data and accounts when investigating. Do not access or change others’ data, disrupt service, perform denial-of-service testing, use social engineering, or test third-party providers linked from the catalog. Stop testing and contact us if you encounter sensitive data. This page does not authorize intrusive testing or guarantee a bounty.
Coordination
We review reports and coordinate appropriate remediation. Please allow time to investigate before publicly sharing exploit details. No specific response deadline or reward is promised.