What to include
Describe the affected public surface, reproduction steps, expected behavior, and observed impact. Use fictional or redacted material when possible.
NX Wardensecurity
Responsible disclosure without exposing more risk.
Send a concise responsible disclosure report to ceo@nxwarden.com.
What not to send
Do not email passwords, private keys, API tokens, raw credentials, customer data, or unnecessary infrastructure identifiers. Do not disrupt services or access data beyond what is needed to describe the issue.
ProofPack boundary
ProofPack scans configured text and artifact names, but a clean scan does not prove a bundle is safe or complete. ProofPack does not provide compliance certification.