# Security

If you find a security vulnerability in the Varyk compiler, its generated code, or this website, please report it to [security@varyk.com](mailto:security@varyk.com) rather than opening a public issue. Please do not disclose it publicly until a fix is available.

Include what you found, how to reproduce it, and which version or commit you tested. Varyk is maintained by one person, so replies are best effort: you will hear back from a human as soon as possible, and if you have heard nothing after two weeks, please send a reminder. Nothing is published before a fix or a decision.

This information is also published in [`/.well-known/security.txt`](/.well-known/security.txt).