Security is fundamental to Breez. If you discover a vulnerability, we encourage you to report it responsibly.

Please report security issues privately to contact@breez.technology. Do not file a public issue or pull request.

When reporting a vulnerability, please include, if available:

• Affected version or commit
• Where you found it: glow-app.co, a preview deployment, or a local build
• Browser and operating system
• Description of the vulnerability and its potential impact
• Steps to reproduce or a proof of concept

Glow is built on the Breez SDK and also ships as a native app from breez/glow-app. Report issues in any of them to the same address rather than filing publicly.

We will acknowledge your report and keep you informed as we investigate and address the issue.