Security

NEXUS treats security as a first-class requirement: least privilege, auditability, deterministic builds, and continuous verification. If you believe you’ve found a vulnerability, please disclose responsibly.

Report a vulnerability

Email: security@nexusbase.tech
Subject: SECURITY — <short summary>

Include minimal reproduction steps and affected components/endpoints.
Do not exfiltrate data or perform destructive actions.
We will acknowledge receipt and triage as quickly as possible.

Scope

Public website and product endpoints under *.nexusbase.tech
Repositories and CI systems used for NEXUS products

Safe harbor

We support good-faith security research. If you act in good faith, avoid privacy violations, and do not disrupt services, we will treat your report as authorized under this policy.