Report security vulnerabilities via responsible disclosure
Security vulnerabilities should be reported to security@orri.so. Reports should include a clear description, steps to reproduce, and a proof of concept. Orri aims to acknowledge reports within 48 hours and provide an initial assessment for critical issues within 7 days. Note that Orri does not offer bug bounties or rewards, but will not pursue legal action against researchers following responsible disclosure practices.