Responsible disclosure
Found a security issue on zelixai.ai or in our widget? We'd like to hear it. Send an e-mail to security@zelixai.ai
with a description, reproduction steps and any PoC. We confirm within one business day and keep you informed through remediation.
In scope: zelixai.ai, widget.zelixai.ai, our public API endpoints and the widget embed. Out of scope: denial-of-service, social engineering, physical attacks, and self-XSS.
We don't currently run a paid bug-bounty programme. Reported issues are publicly credited with the reporter's consent — see the advisories above.
