The security of Encatch and its users is important to us. If you believe you have discovered a security vulnerability in this example project, the Encatch SDK integration, or the Encatch platform, we encourage you to report it responsibly.

We investigate all legitimate security reports and work to resolve confirmed vulnerabilities as quickly as possible.

This repository is a sample Mintlify documentation site that demonstrates Encatch page feedback. Security reports we care about include:

• Vulnerabilities in this example’s integration code (for example, unsafe handling of user input or client-side data in the Mintlify footer feedback flow)
• Issues in how the example loads or initializes the Encatch Web SDK
• Vulnerabilities in the Encatch Web SDK, API, or platform when discovered through this example

Not security issues: questions about setup, missing encatch-config.js, or general documentation feedback. For those, open a regular GitHub issue or contact support@encatch.com.

Publishable keys: this example uses an Encatch publishable key in local config. Publishable keys are intended for client-side use and are not secret credentials. Do not report exposure of a publishable key as a vulnerability. Never commit private or server-side API keys.

Please do not disclose security vulnerabilities publicly (including GitHub issues or pull requests) until they have been investigated and addressed.

Instead, report the issue by emailing:

support@encatch.com

Please include as much information as possible, such as:

• A description of the vulnerability
• Steps to reproduce the issue
• The affected component (this example repo, Encatch Web SDK, or Encatch platform)
• Proof of concept (if available)
• Potential impact

After receiving your report, we will:

• Acknowledge receipt of your report as soon as possible
• Investigate the issue and assess its impact
• Keep you informed of our progress when appropriate
• Credit you for your responsible disclosure, if you would like to be acknowledged

We appreciate the efforts of security researchers and the community in helping keep Encatch secure.