Security

If you have found a security issue in this site or in a Nekologic-operated system, we want to hear about it.

Reporting

Email liam@neko-logic.com with a description, the affected URL or endpoint, and enough detail to reproduce. Please do not open a public issue first.

What we ask

• Give us a reasonable window to fix the issue before disclosing it.
• Do not access, modify or delete data that is not yours.
• Do not run denial-of-service or spam tests against production.

What we commit to

• We acknowledge reports within 3 business days.
• We give you a remediation timeline once we have triaged.
• We will credit you when the fix ships, unless you prefer otherwise.

We do not currently run a paid bounty programme.

Scope

neko-logic.com and its subdomains. Client-operated systems are out of scope: report those to the client, and tell us if you cannot reach them.