SECURITY / DISCLOSURE POLICY

Coordinated Vulnerability Disclosure.

OneMix Storage welcomes responsible security research that helps protect the confidentiality, integrity and availability of its services.

Reporting channel

Report vulnerabilities to security@onemixstorage.strangled.net. Include the affected public URL, reproduction steps, security impact and the minimum evidence needed to assess the issue. Exclude credentials, private keys and personal data.

Research boundaries

Research must not disrupt service or access another person's data. Denial-of-service testing, social engineering and automated high-rate scanning are prohibited. Use only accounts and data you are authorized to access. Stop testing if you encounter sensitive information.

Coordinated handling

Submit findings privately and coordinate public disclosure with the security team to allow assessment and remediation. Limit testing to the minimum needed to establish the issue and avoid modifying or deleting service data.