Responsible Disclosure
Last updated November 3, 2026
Keeping your files safe is central to what we do. If you believe you have found a security vulnerability in NexusCloud, we want to hear from you, and we appreciate your help.
How to report
Please report vulnerabilities through our contact page at /contact, and mark your message as a security report. Include a description of the issue, steps to reproduce it and the potential impact.
Guidelines for research
Only test against accounts you own or have explicit permission to use. Do not access, modify or delete other people's data. Do not degrade the service for others, and stop testing as soon as you confirm an issue.
Out of scope
Social engineering, physical attacks, denial-of-service testing, spam and reports that rely on outdated browsers or compromised devices are out of scope.
Our commitments
We will acknowledge your report promptly, keep you updated as we investigate, and let you know when the issue is resolved.
Safe harbor
If you act in good faith and follow these guidelines, we will not pursue legal action against you for your research, and we will work with you to understand and resolve the issue.
Disclosure
Please give us reasonable time to fix an issue before sharing details publicly. We are happy to coordinate disclosure timing with you.
Recognition
With your permission, we are glad to thank you publicly for helping keep NexusCloud safe.