If you discover a security vulnerability, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Email: security@askalf.org

We will acknowledge your report within 48 hours.

Amnesia is a static HTML file with no server-side processing. Security concerns are primarily around:

• The SearXNG backend configuration
• VPN tunnel configuration (Gluetun)
• Nginx reverse proxy settings
• Cloudflare tunnel access controls