Security

Security policy

This page explains how to report a security issue in mountOS and how the mountOS team handles those reports.

Scope

This policy covers the mountOS software, the services in the mountOS suite, and the mountOS web sites at mountos.io and mountos.sh.

Reporting

Send a report to support@mountos.io, or use the contact form. A report includes the affected product and version, the steps to reproduce the issue, and the expected impact.

Handling

The mountOS team confirms receipt of each report, reviews the issue, and works with the reporter on a fix. The team agrees on a disclosure date with the reporter before publication.

Good-faith research

Research that follows this policy is welcome. Research must not access data that belongs to others, degrade service for other users, or publish details before a fix is released.

Advisories

No security advisories are published.

Acknowledgments

The mountOS team credits reporters who disclose valid issues under this policy, if the reporter agrees to be named. No credits are listed yet.