In scope
nightfortress.com and the subdomains NightFortress operates.
Out of scope
- Denial-of-service or high-volume automated testing
- Social engineering, phishing or physical attempts against our people or offices
- Third-party services we use but do not operate
How to report
Email info@nightfortress.com with the subject “Security report”. Please include:
- What you found and where (the URL or service)
- Steps to reproduce it
- The impact you believe it has
- How to reach you
What happens next
We acknowledge every report within three business days, keep you informed while we investigate, and tell you when the issue is fixed.
Safe harbor
If you make a good-faith effort to follow this policy, we will not pursue legal action against you for your research. Good faith means you test only what is in scope, avoid accessing or keeping other people’s data, avoid disrupting our services, and give us reasonable time to fix the issue before you disclose it.
Machine-readable contact details: security.txt