Security Disclosure Policy
Report responsibly
Use Report Abuse with Security concern or the operator security contact below. Describe the affected route, expected behavior and minimal reproduction using your own test account and synthetic files. Never include passwords, API keys, OTPs, other people's documents or unnecessary personal data.
Testing boundaries
Do not disrupt service, run denial-of-service tests, access other users' data, distribute malware or publish working secrets. If you encounter another person's information, stop testing and report the minimum details necessary. No paid bounty or blanket legal authorization is offered by this page.
Response and limitations
The operator reviews reports and coordinates remediation and disclosure. No response-time guarantee is made for this beta. Automated testing, antivirus scanning and encryption reduce particular risks but do not constitute a security certification or guarantee every file is harmless.