Reporting a vulnerability
Security is what we build. If you believe you have found a vulnerability in NixGuard, please tell us privately so we can fix it before it can be misused.
How to report
Email security@nixguard.com with:
- A description of the issue and its potential impact
- Steps to reproduce, including affected URLs or endpoints
- Any proof-of-concept, screenshots or logs (no customer data, please)
Please don't report vulnerabilities through public channels such as social media or public issue trackers.
Machine-readable contact: /.well-known/security.txt
Testing guidelines
- Only test against accounts you own or have explicit permission to use.
- Don't access, modify or keep data that isn't yours. Stop and report as soon as you see someone else's data.
- Don't run denial-of-service, spam or social-engineering tests, and don't test physical security.
- Give us reasonable time to fix an issue before you disclose it publicly.
Scope
- In scope
nixguard.comandapp.nixguard.com- Out of scope
- Customer servers (
*.app.nixguard.com) and third-party services