Retvest · Security

Report a vulnerability

Help protect Sidekick users by reporting security issues privately.

Updated 12 October 2026

Private contact

Email cliffordprince257@gmail.com with the affected version, platform, a short description of the impact and minimal steps to reproduce using synthetic data.

Do not include API keys, passwords, customer documents, complete workspaces or other people's information. Avoid publishing a working exploit or sensitive details in a public GitHub issue.

Scope and expectations

Sidekick is a private development preview. Public installers are not yet available. There is no guaranteed response time or paid bounty advertised here. Do not test against accounts, devices or data you are not authorised to access.

For website issues, include the affected retvest.com address. For ordinary bugs, email the same contact with a reproduction that contains no private data.

Machine-readable contact

Security tools can find the same contact at /.well-known/security.txt. Publishing this contact is not a security certification.