Reporting a vulnerability
Found an issue? Email us before disclosing it publicly, so we can fix it first.
Response time and disclosure timeline: pending.
How it's built
- Runs locally. No cloud backend holds your code.
- No telemetry. Technically Not doesn't send usage data anywhere.
- No stored passwords or API keys. Each agent CLI signs in itself.
- Folder-trust prompt. You approve a folder before agents start in it.
Updates
Installed copies don't auto-update yet — get new versions from the download page.
Code signing
Installers aren't code-signed yet, so Windows may warn before you run one.