Report vulnerabilities to security@getbeb.dev. You should hear back within a few days; please allow time for a fix before disclosing publicly.

Reports land with a human first, deliberately — beb manages authorized_keys and runs behind sshd, so we treat our own inbox as untrusted input, the same way beb treats yours.

Worth knowing when assessing beb's surface:

• The relay grants no shell: every connection runs serve mode under an authorized_keys ForceCommand with restrict, and serve's grammar has no membership or admin verbs.
• Identity comes from the ssh key, never from anything a client sends; the wire carries no identity claim at all.
• Message bodies and node names are treated as hostile: validated charsets, no shell interpolation anywhere, control characters (C0, DEL, and C1) refused before storage.