Abuse reporting

Report harmful use without sharing secrets.

Abuse reports cover harmful content, impersonation, unauthorized automation, policy evasion, and misuse of a generated Ghostbuild application. Security vulnerabilities use a separate private channel.

Public beta. These pages describe the current public beta. They are maintained by the project owner and have not been reviewed by qualified counsel.

File an abuse report

Create a GitHub abuse report

The form is public. Do not post credentials, private personal data, exploit details, or confidential project content. Ghostbuild does not promise a response time during public beta.

Cloudflare-hosted resources

Deployed applications and resources are owned by the connected customer Cloudflare account. Ghostbuild can investigate its own control-plane activity, but it may not be able to remove or inspect customer-owned resources. You may also need to use Cloudflare’s abuse reporting process.

Public beta channel limits

Support and abuse use public GitHub issues for non-sensitive reports. Security vulnerabilities use GitHub private vulnerability reporting. No response-time commitment is offered during public beta. Do not rely on this form for an emergency response.