Security

Security & Responsible Disclosure

Last updated: 1 June 2026

We take the security of our website, products and the data they hold seriously, and we welcome the help of the security community.

How we protect data

  • Encryption in transit (HTTPS everywhere) and encrypted storage for sensitive data.
  • Role-based access controls and least-privilege internal access.
  • Continuous monitoring and error tracking, with alerting on anomalies.
  • Regular dependency and security updates, and verified backups.

Reporting a vulnerability

If you believe you've found a security issue, please email security@xoredge.com with enough detail to reproduce it. We'll acknowledge your report, keep you updated, and aim to fix valid issues promptly.

Responsible disclosure

  • Give us reasonable time to fix an issue before public disclosure.
  • Don't access, modify or delete data that isn't yours, and don't degrade our service.
  • Act in good faith and within the law — we won't pursue good-faith research that follows these rules.