One address. It works.
hello@avano.app — for everything. Questions, early access, press, security reports, legal requests, or telling us a sentence on this site is wrong.
An address that silently drops mail is worse than no address.
The conventional contact page has four or five departmental addresses. It looks organised. It is also, for a company this size, mostly fiction — and in one case a genuinely harmful one.
Consider a security@ address that nobody has confirmed receives mail. A researcher writes to it, gets no bounce, and reasonably concludes they have reported the issue and started a disclosure clock. Then nothing happens, not because we ignored them but because the message went nowhere. They believe they have disclosed responsibly and we never knew. That is strictly worse than having no security address, because an absent one at least makes a person look for a working one.
So we publish the one address we have confirmed a human reads, and the machine-readable file at /.well-known/security.txt lists the same one deliberately. If you have seen security@, press@ or careers@ on an Avano page anywhere, they are unconfirmed and this page supersedes them.
Questions, press, early access
Anything about the product, joining early access, or a journalist fact-checking a story. We would rather you got it right than fast, and we will help.
hello@avano.appReporting a vulnerability
Same address, and it is the one in our security.txt. If a claim on this site is stronger than what the software does, that counts as a security report too.
Law-enforcement requests
Same address, marked for the legal contact. Read the policy first — for the messenger there is almost nothing that could be produced, and knowing that will save you time.
Read the request policy →Independent, and small on purpose.
Avano is founder-led and self-funded. There is no ticketing system and no support tier — replies come from the people building it, which also means they are sometimes slow. We are not going to publish a response time we have never had to meet.
One thing worth saying plainly, because it protects you: we can never help you recover an identity, and nobody legitimate will ever ask you for your recovery phrase. There is no account on our side, no reset and no verification we could perform even if we wanted to. Anyone contacting you claiming to be Avano support and asking for anything at all is not us.