# Contact Penthera

> **Project page.** For "how do I reach the people behind Penthera?"

Penthera is an open-source project, maintained by Daan van der Zwaag. Pick the channel that fits your question.

[Email Penthera](mailto:daan@penthera.org?subject=Penthera)

## Which channel to use

- **A bug or a wrong finding:** open a [GitHub issue](https://github.com/danoszz/penthera/issues). Include the command, the Penthera version and the rule ID.
- **A question or an idea:** start a [GitHub discussion](https://github.com/danoszz/penthera/discussions).
- **A vulnerability in Penthera itself:** report it through a [private security advisory](https://github.com/danoszz/penthera/security/advisories/new), and not in a public issue. The [security policy](https://github.com/danoszz/penthera/blob/main/SECURITY.md) says what to expect.
- **Research or press:** email daan@penthera.org.
- **News from the project:** [@penthera_org on X](https://x.com/penthera_org).

## If you own a site

To keep the live check off your site, add a `User-agent: Penthera-QuickCheck` group with `Disallow: /` to your robots.txt. The [terms](https://penthera.org/terms#for-site-owners) show how, and list every request the check makes.

## What it is not

This is not a support desk with a response time. Penthera is free software, maintained part time. It is also not a way to ask us to test a site: run `npx penthera` yourself on what you own or may test.

## What happens to what you send

This page has no form, so penthera.org stores nothing you send. Google Workspace stores email. Issues and discussions are public on GitHub, so leave out secrets and private data. [Trust](https://penthera.org/trust) lists the services that run penthera.org.