Security

Tell us what
you find.

Security reports help make Linewisp safer. If you find a vulnerability in the marketing site, Vecta, or a Linewisp control, email hello@linewisp.com ↗.

Include the essentials

• A clear description of the issue and which Linewisp surface is affected.
• Steps to reproduce it using non-sensitive test data.
• What you expected, what happened, and any suggested mitigation.

Please do not send

• Passwords, one-time codes, session cookies, API keys, private customer files, or payment information.
• Reports through public social posts or issue trackers when they include an unpatched vulnerability.
• Tests that degrade service, access another person's data, or use social engineering.

Current beta boundary

The deployed Vecta beta has no customer accounts, cloud sync, or payment processing enabled. Security reports are still welcome for local file handling, sharing, the static sites, and browser or editor integrations.

This is a best-effort public-beta reporting route. It does not offer a bug bounty, response-time guarantee, or permission to test outside the scope described here.