If you find a security vulnerability in Sevalla or in one of these repositories, report it privately by email to security@kinsta.com. Don't open a public issue or pull request, so it can be fixed first.

Include where it is (a URL, an API operation, a feature or a file), how to reproduce it, what an attacker could do with it, and how to reach you with questions.

Sevalla has no bug bounty program, and the Terms of Service don't allow testing Sevalla's own systems. Report a vulnerability in the docs says how reports are handled and how to test your own applications.