What to include
Include the affected page or product feature, reproduction steps, expected impact, and any safe evidence you can share.
Security policy
Security reports
If you find a vulnerability in a Lurionyx website, service, download, or product, report it directly instead of publishing exploit details.
Machine-readable policy
Researchers can use security.txt at https://lurionyx.com/.well-known/security.txt. It points to this policy and the same reporting contact.
Responsible reporting
Do not access, modify, delete, or disclose other people's data. Do not run destructive tests, persistence, spam, denial-of-service tests, social engineering, or public disclosure before review.
Scope
In scope are lurionyx.com, the feedback flow, official Lurionyx downloads, the archived SysDiag Version 2.0.1 build, and future public product releases.
Unrelated third-party services, devices you do not own, and issues requiring physical access to someone else's machine are out of scope.
Archived builds
SysDiag Version 2.0.1 is unsupported. Responsible reports about tampering, distribution, or vulnerabilities are still welcome.
No bounty program
Lurionyx does not offer a bug bounty. Reports are still welcome.