If you have a security issue to report please message the team about it at root+security@sigil.box or contact Tim Clancy through any of the means listed here on ENS.
We are a small company bootstrapped from a modest angel investment and do not have the funds to commit to paying any formal bug bounty. We still love you, though.