Soma is a program that runs on your computer and can run commands there. We take reports about its safety seriously, and about this website too.
Report a vulnerability
Email security@gravicity.ai.
Please include:
- what you found and where (the page, the command, the version:
soma --version); - the steps to see it again;
- what it lets someone do;
- how you would like to be named, or that you would rather not be.
Please do not put a secret, a key or someone else’s personal information in the email. Describe where it is; we will ask for more if we need it.
You can write in plain words. You do not need a formal report.
What we do with it
- We write back within 5 business days to say we have it and who is looking at it.
- We check it, tell you whether we agree it is a problem, and tell you roughly when a fix might ship.
- We fix it, then say so in the release notes (
CHANGELOG.md) in words a user can act on. If you want credit, you get it. - We ask that you give us 90 days to fix it before you publish the details. If we need longer we will say why, and agree a date with you.
We do not pay bounties. This is a small independent project and Soma is in beta.
What is in scope
- This website (soma.gravicity.ai).
- The Soma beta you install from
github.com/meetsoma/soma-beta, and meetsoma core once it is published (planned: 0.50). - The community hub’s content (
github.com/meetsoma/community): a muscle, protocol or template that does something it does not say it does.
What is out of scope
- Other people’s services that Soma talks to: GitHub, Cloudflare, npm, pi.dev, and the model provider you choose. Please report those to their owners. If you found it by using Soma, tell us too, so we can protect users.
- Somaverse (somaverse.ai) accounts and hosted services. They are covered by a separate page when that service opens. Until then, write to the same address and we will route it.
- Volume attacks (denial of service), spam, and tests that need physical access to someone’s machine.
- Tricking a person into doing something (social engineering), against us or anyone else.
- Reports that only say a header or setting is “missing”, with no way to use it.
How Soma is built to keep you safe
Soma runs on your machine. What it sends out, and to whom, is on the Privacy page. These behaviours ship with meetsoma core 0.50; they are not in the 0.42 beta unless the release notes say so.
- The Somaverse link is off until you pair it, and it shows status only until you allow more. The web app cannot type into your session or read it, unless you set
"hub": { "acceptPrompts": true }. Until then it sees only that a turn started or ended and the name of the tool running. - A project you did not create does not run its own code until you trust it.
- Installing from the hub is limited to the community repository and to your project’s Soma folder.
- Destructive commands (
rm -R,git push -fand others) ask first. - Secret values the agent prints are replaced with
«secret:NAME»in its context and in your transcripts.
Soma is an agent: it can run commands you approve and read what you point it at. Treat a project you did not write the way you treat any code you did not write.
Good-faith research
If you look for a problem in good faith, stay within the scope above, touch only your own accounts and data, stop when you have shown the problem, and keep what you learn private until we have had the time above to fix it, we will not take legal action against you for it, and we will say so to anyone who asks.
This is a statement of how we mean to act. It does not bind anyone who is not part of Gravicity AI, and it does not excuse breaking the law.
Who we are
Gravicity AI, an independent project of a sole proprietorship in Ontario, Canada. Soma is made by Gravicity AI.
Effective October 29, 2026.