Bytes only
Runny hosts script bytes. We never execute user code on our hosts when we review a report.
Report abuse
See something unsafe?
Tell us.
Paste a Runny script URL or slug. We host the bytes and never execute your code — but we will take down malware, credential theft, and illegal content.
How reports work
We review. We do not run it.
You do not need an account. Operators see every open report.
What happens next
An operator can quarantine or revoke the script. If you left an email, you get a receipt — not a tracking pixel.
Share a specific URL
The raw endpoint, the preview page, or a curl one-liner is enough. We extract the slug when we can.