Please report a security problem privately — never in a public issue or the support chat:

• by email: hello@wirecat.dev;
• or through GitHub's private vulnerability reporting.

Say what you saw, how to repeat it, and the version (wa --version). Never send a private.db, a log with message text, or anyone's messages.

What wa keeps on your computer and what stops a send: the shared security page and docs/security.md.

Security audits of wa follow the shared security method in cli-testing.