Report a security issue

Last updated: October 30, 2026

If you think you found a security problem in Enderis, please tell us. This page says how to report it and what happens after you do.

How to report

Send an email to founders@enderis.ai.

Please use this address for security problems only. For help with your account or with the product, email support@enderis.ai.

What to include

  • What the problem is, and where it is: the web address, API route, command or part of the product.
  • The steps to repeat it. A short script or screenshots help.
  • What someone could do with it. For example, read another customer's data.
  • When you found it, and the version of the enderis command-line tool, if it applies.
  • How to reach you.

What we do

  • We read every report and we acknowledge it.
  • We keep you informed while we look into it and, if it is a real problem, while we fix it.
  • We may ask you for more details.

What we ask of you

  • Give us a reasonable time to fix the problem before you tell anyone else about it.
  • Test only with your own accounts and your own data.
  • Do not read, change or delete data that belongs to other people. If you reach such data, stop and tell us.
  • Do not do anything that slows down or stops the service for other people.

What this page covers

enderis.ai and its subdomains, and the enderis command-line tool.

This information is also available in the machine-readable file /.well-known/security.txt.