For issues that likely affect upstream Grok Build as published by xAI, report via the HackerOne program listed by xAI when available:
Do not open public GitHub issues for security reports.
For fork-only concerns (packaging, branding scripts, Surmount-only features such as OpenRouter wiring as maintained here), contact Surmount maintainers privately:
- Email: [email protected] (or the current Surmount security contact)
Please include steps to reproduce, affected version / commit, and impact. Do not file public issues for unfixed vulnerabilities.