Security
Responsible disclosure
OBS welcomes reports from security researchers who identify vulnerabilities in our platform.
What to report
Vulnerabilities affecting OBS applications, infrastructure, or third party services used by OBS. Include the affected surface, steps to reproduce, and any impact you observed.
Our commitments
- Acknowledge receipt within a reasonable timeframe.
- Investigate and respond with a triage decision.
- Keep you informed as the issue is addressed.
- Recognise researchers whose reports lead to fixes, with permission.
Please do not
- Access, modify, or destroy other people's data.
- Perform testing that would degrade service for others.
- Publicly disclose the issue before a fix is available.