Found a weakness? Tell me first.

Send security reports to security@chyren.world. Include the address affected, what you found, the steps to reproduce it and how it could be misused. Every report is acknowledged once it arrives, and fixes that matter to readers are recorded in public once they are safe to describe.

These addresses forward to the Chyren inbox, but delivery from an outside mailbox has not been tested yet. If a week passes without an answer, please write again or reach me another way.

• chyren.world, and fromchyren.com and thechyren.com, which redirect to it.
• The Long Watch and the other interactive tools on the site.

Accounts on other platforms and services run by third parties, including the hosting provider, are out of scope; report problems with those services to them.

If you act in good faith, avoid harming readers or data, do not disrupt the site, give reasonable time to fix a problem before disclosing it, and follow these guidelines, I will not pursue or support action against you for your research. There is no paid bounty.

A machine-readable version of this policy is published at /.well-known/security.txt.