FUNTHEORY Product Studio security

Security approach

FUNTHEORY Product Studio uses static deployment, HTTPS, least-privilege hosting routes where practical, and centralized release management to reduce the attack surface.

Secrets are intended to remain outside the web root and under local encrypted vault control during deployment operations.

Responsible disclosure

If you identify a genuine security issue affecting https://funtheory.online, report it to support@funtheory.online.

Include reproduction detail, affected URLs or products, impact, and any supporting evidence needed for verification.

• Do not access or modify data that is not yours.
• Do not use destructive testing, denial-of-service activity, or social engineering.
• Allow reasonable time for investigation and remediation before public disclosure.

What to expect

Reports are triaged by severity. Service-impacting issues and credential exposure are treated as priority incidents.

Security contact details are also published in machine-readable form through security.txt for automated discovery.