Report vulnerabilities privately to research@simulateai.io before public disclosure. Do not include private assessment evidence, personal data, credentials, or proprietary system outputs in an issue.

AIx scores are not security certification. A high score does not replace threat modeling, penetration testing, access control, incident response, or domain-specific safety review.