Security Policy

Reporting channels

Use security@nx4id.com for vulnerability disclosure. Operational coordination may also use ops@nx4id.com when strictly necessary.

Scope

This policy applies to the public NX4ID website, its static assets, and related public web exposure under nx4id.com unless explicitly excluded.

What to include

Please include affected URL, issue description, reproduction steps, potential impact, and any proof of concept necessary to validate the finding safely.

Safe harbor

Good-faith research intended to improve security will be treated as authorized provided it avoids privacy violations, service disruption, data destruction, and persistence.

Response expectations

NX4ID will review reported issues, validate impact, and respond in a commercially reasonable timeframe depending on severity and operational context.