Responsible Disclosure Policy

Please send vulnerability reports to hello@apparmorx.com and use a clear subject line such as "Security Report". Include enough detail for reproduction, impact assessment, and validation.

Do not access, alter, or exfiltrate data that does not belong to you. Do not interrupt service availability, use social engineering, or test third-party systems that are not owned by AppArmorX.

Give AppArmorX a reasonable opportunity to investigate and remediate before public disclosure.

AppArmorX will review good-faith reports, communicate where follow-up is needed, and work toward reasonable remediation for validated issues.