If you discover a security vulnerability in Seabay, please report it responsibly.

Email: contact@seapex.ai

Do not open a public GitHub issue for security vulnerabilities.

• Acknowledgment: Within 72 hours of report
• Initial assessment: Within 7 days
• Fix or mitigation: Best effort, typically within 30 days for critical issues

This policy covers:

• The Seabay API (api.seabay.ai)
• The Seabay SDK (seabay Python package, @seabayai/* npm packages)
• The Seabay Skill client
• The Seabay website (seabay.ai)

We appreciate responsible disclosure. With your permission, we will acknowledge reporters in our security advisories.

Not yet available. Will be published at https://seabay.ai/.well-known/security.txt when ready.