For the reviewer
If there is a flaw in Siteleon, we would rather hear about it from you than from someone else.
Send security reports to [email protected], encrypted if you prefer — our public key is published on this page. Tell us what you found, where you found it, and how to reproduce it; a short proof of concept is worth more to us than a scanner export. We acknowledge every report by the next business day and tell you whether we can reproduce it within five, including when the answer is that we cannot. You keep the report confidential while we fix it, and we keep you informed rather than going quiet after triage. We do not run a paid bounty programme at present, and we would rather say that plainly than let you find out after the work.
Test your own workspace, nobody else's
Create a trial workspace and test against that, not against another customer's data, site or leads. No denial of service, no social engineering of our staff or customers, no physical testing, and no automated scanning heavy enough to degrade service for others. If you reach someone else's data by accident, stop, tell us, and delete it.
What happens after you press send
We acknowledge, reproduce, assign a severity and give you a fix window that matches it. You get the fix date and confirmation once it ships. Where an issue affected customer data we notify the affected customers directly with what happened and what we did, on the timelines our data processing agreement sets out.
Good-faith research will not be met with lawyers
If you follow the rules above, we will not pursue legal action over your testing, and we will say so to anyone who asks on your behalf. We credit researchers publicly when they want the credit and stay quiet when they do not. If your report duplicates one already in progress, we will tell you that rather than let it sit.
Trust Centre
The rest of this area.
For the reviewer, not the owner: how AI uses your data, where it runs, what stays up, and how to report a flaw.
AI & Data Use
What the assistant can read, whose permissions it borrows, which actions need approval, and what it never learns from.
Infrastructure
Where your pages are built, stored and served, how one workspace is kept apart from another, and what you choose.
Availability
Your published site is served independently of the editor, so a control-plane problem is not an outage for visitors.
Your business online. Built to adapt.
Start with the site you already have, or create something new. Siteleon helps you build it, understand it and keep improving it as the business changes.
No technical setup · Keep your existing site if you want to · [email protected]