Report suspected vulnerabilities through GitHub private vulnerability reporting.

Do not place credentials, customer CSV data, or exploit details in a public issue. Include the affected endpoint, impact, and a minimal reproduction using synthetic data. Rotate an exposed RapidAPI key from the application authorization settings.

The deployed service's current controls and limitations are documented at RowGuard security. For general product support, use the RowGuard discussion or support channel on RapidAPI and provide only the request_id, HTTP status, aggregate summary and non-sensitive reproduction details. The application does not intentionally store request bodies or cell values; RapidAPI and Cloudflare process transport and usage metadata under their own policies.