Security

Reporting a security problem in WayX

If you think you have found a security problem in engine.wayx.app or wayx.app, write to security@wayx.app. Tell us what you found, how to reproduce it and what you think it allows. We read every report and will reply within 5 working days.

What you may test

engine.wayx.app and wayx.app, with an account of your own. Do not read, change or delete data that is not yours; if you reach someone else's data, stop and tell us. Do not test with denial of service, spam, social engineering or physical access. Do not test Supabase, Vercel or Resend themselves; report to them.

What we promise

If you follow this page, we will not take legal action against you for your research and will not ask anyone else to. We will tell you when the problem is fixed and, if you want, name you on this page.

What we do not offer

WayX is run by one person and pays no bounties.

Last updated: October 29, 2026. Machine-readable contact: /.well-known/security.txt.