Security
Security & Responsible Disclosure
Last updated: 1 June 2026
We take the security of our website, products and the data they hold seriously, and we welcome the help of the security community.
How we protect data
- Encryption in transit (HTTPS everywhere) and encrypted storage for sensitive data.
- Role-based access controls and least-privilege internal access.
- Continuous monitoring and error tracking, with alerting on anomalies.
- Regular dependency and security updates, and verified backups.
Reporting a vulnerability
If you believe you've found a security issue, please email security@xoredge.com with enough detail to reproduce it. We'll acknowledge your report, keep you updated, and aim to fix valid issues promptly.
Responsible disclosure
- Give us reasonable time to fix an issue before public disclosure.
- Don't access, modify or delete data that isn't yours, and don't degrade our service.
- Act in good faith and within the law — we won't pursue good-faith research that follows these rules.