Security

Responsible disclosure

If you discover a vulnerability, follow this process:

1. 1

   Send a detailed report to security@corax.chat

2. 2

   We acknowledge receipt within 48 hours

3. 3

   We analyze and fix the vulnerability

4. 4

   Coordinated disclosure after the fix

Rules

• Do not cause any damage to users or systems
• Do not access other users' data
• Do not disclose publicly before the fix
• Act in good faith