Security
Found a hole? Tell us first.
We welcome good-faith reports from researchers and curious users. Skysmind is a small studio, so we can't run a bounty program, but we will listen, fix, and give credit if you want it.
What helps us most
- What you found and where (Nuvira, this website, or another Skysmind service)
- Steps to reproduce it, in plain language
- What you think the impact could be
- Whether you want credit, and how to name you
Please don't
- Access, change, or keep other people's data
- Run tests that could take a service down
- Share the issue publicly before we've had time to fix it
- Use social engineering against anyone on the team
What to expect
We'll acknowledge your report within a few days, keep you updated while we work on it, and tell you when it's fixed. Where full technical detail would put users at risk, we may keep some specifics general, and we'll say so.
In scope
This website, the Nuvira app, and the services that support them. Reports about other companies' products or purely theoretical issues are welcome but lower priority.
Prefer plain email? [email protected]