Security

We take security seriously. If you have found a vulnerability in the Liana software, the Liana Business service, or this website, please let us know responsibly.

How to report

Send your report to and add in CC.

For sensitive disclosures, please encrypt your message using PGP using Edouard's key:

Fingerprint: 5B63F3B97699C7EEF3B040B19B7F629A53E77B83

You can get it from:

• edouard.paris (direct download)
• wizardsardine.com/pgp_security_ed.txt
• keys.openpgp.org: gpg --keyserver hkps://keys.openpgp.org --receive 5B63F3B97699C7EEF3B040B19B7F629A53E77B83

What to include

A good report helps us reproduce and fix the issue quickly. Please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof of concept
• The version of Liana or the URL affected

Coordinated disclosure

We will acknowledge your report as quickly as possible and keep you informed as we work on a fix. We ask that you give us reasonable time to address the issue before any public disclosure.