Security and Responsible Disclosure

Last updated: 2026-05-16security contact: dev@hybt.ai

1. Contact

If you believe you have found a security issue affecting this website, send a responsible disclosure report to dev@hybt.ai.

Registered office: c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

2. What to include

  • A clear description of the issue
  • Steps to reproduce or verify
  • The affected URL, browser, user agent, or configuration
  • Any supporting screenshots, logs, proof-of-concept code, or timestamps

3. Safe behavior

Please avoid privacy violations, destructive testing, data exfiltration, denial-of-service, or changes to information. We ask researchers to act in good faith and give us reasonable time to investigate and address issues before public disclosure.

4. Site-level protections

  • Static deployment architecture designed to minimize attack surface
  • Security headers configured for content isolation and browser hardening
  • Email-first contact flow instead of fragile client-side form handling
  • Minimal dependency footprint to reduce breakage and supply-chain risk