Security
Report first, publish later.
Found a problem with Vivioo?
Email security@vivioo.io. Tell us what you found, where, and how to see it again. Please give us a fair chance to fix it before you tell anyone else.
- Only test with your own account and your own data.
- Don’t read, change or delete other people’s data.
- Don’t slow the site down for others.
We will reply, tell you what we decide to do, and credit you if you want to be named.
When Vivioo’s own tests find a problem in an agent
Vivioo runs harmless tests on AI agents (see how the tests work). If one of the agents we support behaves badly in one of our own runs, for example by following a hidden instruction on a page, we tell the company that makes the agent first, through its own reporting program, and we follow that program’s rules.
We publish nothing about it until the company has had time to look at it. Until then, Vivioo’s own pages say nothing about that result.
Your own Proofs are yours
A Proof shows one run of your own agent, on one day, with one setting. It is yours to share or delete. It is not a rating of a product.
What our test pages never do
- Nothing on them is real: no real purchases, no real money, no real sign-in.
- What is typed into a test form is never stored or logged.
- Hidden instructions only ever ask for something harmless, like opening a link.