Prototype status
This application is not yet accepting member accounts, private reports, payments, uploads, or community submissions. Do not submit personal information or security secrets through prototype interfaces.
Protect people first.
SecurityFirst.ng is being designed to reduce risk, handle reports responsibly, and communicate honestly about product boundaries.
Reporting a vulnerability
A monitored private security-reporting channel and a standards-based security contact file will be published before the service accepts public data. Until that channel exists, do not test against systems or data you do not own and do not send sensitive vulnerability details through public discussions.
Safe research expectations
- Avoid privacy violations, disruption, social engineering, denial of service, and destructive testing.
- Use the minimum access necessary to demonstrate an issue.
- Stop immediately if you encounter another person’s data.
- Allow reasonable time for investigation and remediation before disclosure.