Trust center
Report a security vulnerability
If you believe you have found a security issue in one of our sites, please tell us privately.
In short
Email [email protected] with the subject "Security report", the affected URL, the steps to reproduce and the impact you see. A person replies within one business day. Please give us reasonable time to fix the issue before you disclose it.
Last updated
01 How to report
How do you report a vulnerability?
Email the details to [email protected] with "Security report" in the subject line. Please include:
- The URL or component affected
- Steps to reproduce, with any proof-of-concept code
- The impact you believe it has
- How we can reach you with follow-up questions
02 Scope
What is in scope?
Services we embed, such as the meeting scheduler, belong to their providers. Please report issues in those directly to the provider.
- nexstella.com and its pages
- blog.nexstella.com
03 Please
What do we ask of you?
- Do not access, change or delete data beyond what you need to show the issue
- Do not run denial-of-service tests, social engineering or physical attacks
- Give us reasonable time to fix the issue before you disclose it publicly
04 What to expect
What happens after you report?
There is no paid bug bounty program.
- We confirm that we have your report.
- We aim to keep you informed while we look into it.
05 security.txt
Is there a machine-readable contact?
Yes. The security.txt file follows RFC 9116 and points to this page.