LoopOnyx

Security disclosure

Last updated 17 October 2026

Report a vulnerability to [email protected]. We do not promise a bounty.

  1. How to report

    If you find a vulnerability in LoopOnyx, email [email protected]. Include what you found, the steps to reproduce it, and when you found it. Describe it plainly. Do not ask for payment.

  2. Give us time

    Give us a reasonable time to investigate and fix the issue before you publish the details or tell anyone else. We will read a genuine report and, when we can, we will tell you once it is fixed. We do not promise a reply within a set number of days.

  3. Good-faith research

    Research is in good faith if you do all of the following. You avoid harm beyond the smallest step that shows the issue. You do not interrupt the service. You do not read, change, or delete data that belongs to someone else, beyond that smallest step. You do not use social engineering against our people or our customers. You report the issue to us as clause 1 describes.

  4. Safe harbour

    If you follow this policy, we will not sue you for that research, and we will not ask the police to treat it as an offence. We cannot bind a prosecutor, the police, or a court. This is our promise, not a grant of immunity.

  5. No bounty

    We do not offer a paid bounty, and we do not promise a reward. A thank-you is at our discretion and creates no ongoing scheme.

  6. Out of the harbour

    This policy does not allow attacks on other customers, denial of service, spam, or access to data you do not need in order to show the issue. Those acts stay subject to the Acceptable Use Policy and the law.