Security policy
No permission is granted for unsolicited security testing.
Security testing is not authorized
NonLogs does not authorize visitors, account holders, or third parties to penetration test, vulnerability scan, or otherwise probe the security of our website, APIs, accounts, wallets, or infrastructure. Do not attempt to bypass access controls, access another user's data, exploit vulnerabilities, or disrupt the service.
Creating an account, obtaining an API key, finding a public endpoint, or describing an activity as research does not grant permission. This page and our security.txt file are contact notices, not an invitation to test or a grant of authorization.
Contact us about a security concern
Email [email protected] with questions or to report a potential issue noticed during normal use. If you encounter an issue, stop interacting with it and report what you have already observed. Do not perform further tests or access, change, or download other users' information.
Include the affected page, the time, and a brief description. Do not send passwords, recovery phrases, private keys, API secrets, or other users' personal data. Sending a report or receiving an acknowledgement does not authorize testing. Any exception requires explicit prior written permission from NonLogs specifying the scope and timing.