Responsible Disclosure
Report a Security Issue
We welcome good-faith reports about vulnerabilities affecting Arcitix-owned systems.
Scope
Report vulnerabilities in Arcitix-owned public web properties and systems. Do not test third-party client environments, social engineering, physical attacks, denial of service, or spam.
Rules
Use minimal testing, avoid data access beyond what is necessary to prove impact, do not disrupt services, and give us reasonable time to investigate before disclosure.
Submit
Email a clear report, affected URL, reproduction steps, impact, and your contact details to security@arcitix.com.