While great care is taken to ensure the highest level of security and privacy in SimpleX network servers and clients, all software can have flaws, and we believe it is a critical part of an organization's social responsibility to minimize the impact of these flaws through continual vulnerability discovery efforts, defense in depth design, and prompt remediation and notification.
The implementation security assessment of SimpleX cryptography and networking was done by Trail of Bits in November 2022.
The cryptographic review of SimpleX protocols design was done by Trail of Bits in July 2024.
-We are planning implementation security assessment in early 2025.
+We have scheduled implementation security assessment for June 2026.
To report a security issue, please contact us directly via email chat@simplex.chat. Please do NOT report security issues via GitHub issues or via any public channels.
Please encrypt the email message using the key for this address from keys.openpgp.org (its fingerprint is FB44 AF81 A45B DE32 7319 797C 8510 7E35 7D4A 17FC) and make your key available for a secure reply.