# Security Policy
I highly recommend self-hosting electrs.
Denial-of-Service attacks are excluded from the threat model - DO NOT share your electrs instance with untrusted users!
## Reporting a Vulnerability
Contact me at dev@romanzey.de and include the following:
Code – A proof of concept demonstrating the issue.
Description – A thorough explanation of the bug and its potential impact.
In case you consider this a sensitive matter, I will provide instructions on how to set up a Signal encrypted channel.