I think I found a security issue, how do I report it? Do you have a security policy?

Last updated: July 24, 2024

Stainless takes security seriously, you are encouraged to report any security vulnerability promptly so that appropriate action can be taken.

Reporting an SDK security issue

Please contact the Stainless team at security@stainlessapi.com with detailed information. We will review and respond promptly.

For example:

Please contact the Stainless team at security@stainlessapi.com with detailed information. We will review and respond promptly.

If you encounter security issues that are not directly related to SDKs generated by Stainless but pertain to the services or products provided by the company who owns and publish the SDK, please follow the respective company's security reporting guidelines.

See the file SECURITY.md present in SDKs generated by Stainless for details.

Responsible Disclosure

We appreciate the efforts of security researchers and individuals who help us maintain the security of SDKs we generate. If you believe you have found a security vulnerability, please adhere to responsible disclosure practices by allowing us a reasonable amount of time to investigate and address the issue before making any information public.

Thank you for helping us keep the SDKs and systems they interact with secure.