Security

Report suspected security issues privately through the Jerp support Discord. Do not publish exploit details, credentials, or private server data.

Include in a report

• A clear description of what happened
• The affected command, dashboard page, or bot feature
• Steps that reproduce the issue
• Relevant timestamps and non-sensitive context

Protect sensitive information

Never send bot tokens, database credentials, session secrets, private keys, or full production database exports in a public channel.