orbit8r
Home/Responsible disclosure
Responsible disclosure

Help us understand security issues clearly.

A practical channel for reporting potential security issues without exposing other people’s data or causing destructive impact.

What to include

Send the affected URL, clear reproduction steps, expected and observed impact, and any relevant redacted data. Keep reproduction minimal and stop once the issue is demonstrated.

Please avoid

Do not access or disclose third-party data, change or delete records, run destructive actions, or test beyond what is necessary to explain the issue. Do not include secrets in a report.

Contact

Use security@orbit8r.com as the existing security channel. This page does not promise a bounty, SLA, or legal safe harbor.

For general questions, use the Security contact route. Review policies and privacy before reporting.