Security and trust
Help us protect user-owned AI memory by reporting suspected vulnerabilities privately and sharing only sanitized evidence.
Vertiso Memory is operated by Vertiso Corporation.
Do not open a public issue for a suspected vulnerability. Use the private vulnerability-reporting flow for the affected plugin.
Avoid privacy violations, service disruption, social engineering, and access beyond what is needed to demonstrate the issue. Give us reasonable time to investigate before public disclosure.
Include the affected client and plugin version, impact, reproduction steps, and sanitized logs.
Vertiso supports the latest published version of the Vertiso Memory plugin for each marketplace.
Update to the latest version before reproducing an issue when it is safe to do so. Include the original affected version in your report.
Never include passwords, API tokens, OAuth authorization codes, client secrets, credentials, or real Memory Data.
For OAuth issues, name the client and provide the sanitized error. Remove authorization codes and tokens from URLs, screenshots, and logs before sending them.
Check the public status page for active service disruptions and incident updates. Report a new security concern through the private channels above.
View service status