Security & Responsible Disclosure

Report a concern

Email security@aeralyx.com with a clear description, affected URL or component, reproduction steps, and any supporting evidence. Do not include unnecessary personal or confidential information.

Good-faith research

Please avoid privacy violations, social engineering, denial-of-service activity, data destruction, and testing against production or customer data. Do not access, modify, retain, or disclose data that does not belong to you. Stop testing if you encounter sensitive data.

Our response

We will review reports in good faith and may contact you for clarification. Aeralyx does not offer or promise a bug bounty or other reward through this policy.

Scope

This notice covers the public Aeralyx website. Authenticated services may have separate security reporting guidance before production activation.