Security & Transparency

We take trust seriously. Below are independent security proofs, our source code, and how to report vulnerabilities.

OpenSSF Best Practices

Passing badge from the Open Source Security Foundation. 100+ security criteria self-audit.

Hardenize Report

Independent scan: TLS, HSTS, CSP, DNSSEC, CAA, DMARC. Live data, no cache.

OpenSSF Scorecard

Automated open-source security score: pinned dependencies, CI best practices, branch protection.

Source code

Fully open source under MIT. Read, audit, or fork the code.

Disclosure policy

How to report a vulnerability. We respond within 72 hours.

security.txt

Machine-readable security contact per RFC 9116.

Direct contact

For security researchers: security@prooved.xyz. PGP on request.