Please report a security problem privately — never in a public issue or the support chat:

• by email: hello@wirecat.dev;
• or through GitHub's private vulnerability reporting.

Say what you saw, how to repeat it, and the version (max --version). Never send a token, a session or anyone's messages.

What the tool keeps on your computer and what stops an agent from sending: wirecat.dev/en/docs/security, and the MAX details in docs/security.md.