Security

SECURITY.md

Security Policy

Private Data

Do not publish:

Home Assistant long-lived access tokens
Worx account credentials
Worx access or refresh tokens
mower serial numbers
raw Home Assistant .storage files
raw API dumps
RTK map payloads with coordinates
reverse-geocoded address data
screenshots that reveal exact home/garden location

Reporting Issues

When reporting a problem, include:

Home Assistant version
integration version
mower model
sanitized logs
a short description of what changed before the issue appeared

Remove tokens, coordinates, serial numbers, map IDs and account identifiers before posting logs publicly.

There aren't any published security advisories