Help with Shippable
Email hello@shippable.dev and a real person will answer, usually within two working days.
A finding looks wrong
Use the "This looks wrong?" button on that finding in your report. We read every one, and wrong findings get fixed for everyone.
Ownership verification fails
- Check the tag is inside
<head>on your live site (view the page source) and that you redeployed. - Use the tag from your own scan page: each tag only works for the browser or machine it was made for.
- If the page says your host blocked the check, it's your host's bot protection. The page retries on its own; on Vercel you can also add a firewall rule letting "Shippable" through.
The CLI or your AI agent
- Install and usage: MCP server guide and the shippable-dev README.
- Common security questions: Answers and the Vibe-Code Top 10.
- When you email about a scan, include the Shippable version and the command you ran. Please don't send secret keys.
Someone scanned my site
Shippable only scans live sites whose owner added a verification tag, and its requests identify themselves with a user agent containing "Shippable". If you didn't run it, you can block that user agent at your host, and please tell us.
Found a security issue in Shippable?
Email hello@shippable.dev with "Security" in the subject. Please give us a chance to fix it before telling others, and don't access other people's data while testing.
Your data
To see, export or delete your data, email us. Details in the privacy policy and the terms.