Responsible disclosure
Found a vulnerability in our own website or systems? We want to hear about it.
How to report
Email [email protected] with a description, steps to reproduce and any proof of concept. Our machine-readable contact details are in /.well-known/security.txt.
What we ask
- Test only against joxura.com and our own systems, never against our clients.
- Do not access, change or delete data that is not yours, and stop as soon as you confirm an issue.
- No denial-of-service, spam or social engineering of our staff.
- Give us reasonable time to fix the issue before sharing details publicly.
What we commit to
- We aim to acknowledge reports promptly and keep you updated.
- [Safe-harbor wording, pending lawyer review]
- With your permission, we credit you once the issue is fixed.
We do not currently run a paid bug bounty.