Security
Responsible disclosure.
If you find a security issue in the bitpixe preview, report it privately. Do not test third-party systems, social-engineer staff, or run denial-of-service tests.
Security contact
Email security@bitpixe.com. The machine-readable policy is at /.well-known/security.txt.
In scope
- bitpixe.com and its public preview APIs
- Authentication and authorisation boundaries
- Server-side request forgery, injection, and access-control flaws
- Exposure of secrets or non-public data
Out of scope
- Third-party services and infrastructure not operated by bitpixe
- Social engineering and physical attacks
- Volumetric or denial-of-service testing
- Reports that require accessing another person’s data
What to include
A clear description, reproduction steps, the affected URL or component, and the minimum proof needed to verify the issue. Do not include private keys, passwords, or personal data.
What we claim
This preview has no bug bounty and no formal safe-harbour programme. Reports are reviewed on a best-effort basis. Any future programme will be published here before it opens.