OBSFERA / Security reportingFOR SYSTEMATIC NATURE RESEARCH
Security reporting
This mock-up contains draft texts. The legal provider, final agreements and contact details must be confirmed before public launch.
DRAFT · FOR CONTENT AND LEGAL REVIEW
Report a vulnerability
A confirmed security contact must be provided before production. Describe the affected component, potential impact and minimal reproduction steps. Do not include passwords or personal data.
Careful investigation
Limit checks to what is needed to demonstrate the issue. Do not modify others’ data or disrupt service. Agree an appropriate remediation period before publication.
Agreements to confirm
Contact, encrypted communication if applicable, acknowledgement timing and coordination remain to be confirmed. This draft promises no reward or legal immunity.