Report vulnerabilities privately to [email protected]. Do not include credentials in issues. netnotify redacts credentials by design and supports environment-based secrets, TLS and least-privilege systemd hardening.