Skip to content

Security: doubleagent-so/agent-detector

SECURITY.md

Security

Report privately

Email support@doubleagent.so with "security" in the subject for:

  • a technique that makes an agent or bot pass as human (an evasion),
  • a way to make real visitors look automated at scale,
  • anything in this package that could harm the pages that run it.

Include the browser or tool and its version, a minimal reproduction and the verdict you saw. Do not open a public issue with a working evasion. We will reply, agree on a fix and a disclosure date, and credit you unless you prefer otherwise.

Scope

This repository is the client-side engine. The engine's weights are public by design. Double Agent's cloud re-scores every session with server-side evidence and does not trust client verdicts, so reports about the hosted service are welcome at the same address.

There aren't any published security advisories