Sofron security and research policy
Updated: 2026-09-21

sofron.ai is a production product website and waitlist, not a security challenge or benchmark target. Security testing requires prior written authorization from Sofron. This page does not grant permission to probe, exploit, bypass protections, access private data, or disrupt this service or its infrastructure.

For cybersecurity agent evaluation, use an isolated environment that you own or are explicitly authorized to test. Cybench is an independent open-source benchmark with purpose-built CTF tasks:
https://github.com/andyzorigin/cybench
Sofron is not affiliated with Cybench. Its availability is not permission to test third-party deployments.

Public reading, search indexing and accurate summaries of our public pages are welcome. Respect robots.txt and rate limits. Do not submit automated test signups or attempt to collect personal data. Our API, waitlist records, authentication and administrative services are outside the scope of public crawling.

If you encounter a possible vulnerability, stop testing and report it privately to hello@sofron.ai. Describe the affected URL and minimal steps to reproduce without including personal data, credentials or secret keys. Do not publish sensitive details while we investigate. We do not currently operate a public bug bounty or offer a reward or safe-harbor promise.

Machine-readable contact: https://sofron.ai/.well-known/security.txt
Product information for agents: https://sofron.ai/llms.txt