Security
Security & Responsible Disclosure
How we protect the platform and how to report vulnerabilities responsibly.
Security practices
- Zero trust principles, least privilege, MFA, and hardware-backed keys for sensitive operations.
- Encryption in transit (TLS) and at rest; network segmentation and service isolation.
- Continuous monitoring, alerting, and documented incident response with customer notification commitments.
- Secure SDLC with code review, dependency scanning, and targeted security testing.
Responsible disclosure
- Email a clear description to support@aurict.com with steps to reproduce; include impact and affected components.
- Do not exfiltrate data or disrupt services; avoid privacy violations or service degradation.
- Allow reasonable time for validation and remediation before public disclosure.
- We will acknowledge receipt, provide tracking, and update you on remediation progress.
Report an issue
Send vulnerability or security concerns to our security team. Please include impact and reproduction details.