🛡️ Security & responsible disclosure
We take the safety of Andromeda and its members seriously. If you believe you've found a security vulnerability, please report it to us privately so we can fix it before it's disclosed publicly.
How to report
Email security@andromedasphere.com with a description, steps to reproduce, and the impact. Encrypt sensitive details if you can.
Our commitment
- We'll acknowledge your report within 72 hours.
- We'll keep you updated on our progress toward a fix.
- We won't pursue legal action for good-faith research that follows this policy.
- We'll credit you (with your permission) once the issue is resolved.
In scope
The Andromeda web app and its APIs. Please do not run automated scanners that degrade service, access or modify other users' data, perform social-engineering or physical attacks, or test denial-of-service. Test only against your own accounts.
Machine-readable policy: /.well-known/security.txt