Security
Found a vulnerability?
Email sheriff@subnetslinger.com. We acknowledge within 2 business days, keep you updated, and credit you in the changelog if you want.
What helps
- The app and version (Help ▸ About) and your OS.
- What you found, the steps to reproduce it, and what an attacker could do with it.
- Whether you'd like to be credited, and the name to use.
Please don't
Please don't test against other people's networks or our licensing service beyond your own account. Don't include anyone else's data, Vault contents or production passwords in a report.
Good to know
- Our release key only signs; it can't be used to encrypt a report to us. If something is too sensitive for plain email, send a short note first and we'll agree on a channel.
- Machine-readable contact details are in /.well-known/security.txt.
- To check a download is genuine, verify it against our signing key 7409 3BD6 9827 BE9B 244B 11EE CE86 3718 9592 1ABD — steps on the Setup page. How the app handles your data is on the Trust and Privacy pages.
AISMITH PDX LLC · Oregon, USA