We take the security of the quiXzoom platform seriously. If you have identified a potential vulnerability, we want to hear from you.
Send details of the vulnerability to our security team. Include a clear description, steps to reproduce, affected component, and potential impact. We treat all reports as confidential.
The following are in scope for responsible disclosure:
Third-party services integrated by quiXzoom (payment processors, identity verification providers, CDN) are not in scope. Please report those directly to the respective vendor.
quiXzoom will not initiate legal proceedings against security researchers who identify and report vulnerabilities in accordance with this policy. Good-faith research that avoids user data exposure, system disruption, or privacy violations is protected.
We will not share your identity or contact details with any third party without your explicit consent, except where required by law. Reports are handled by the security team only.
Vulnerability research that involves accessing, modifying, or exfiltrating user data; disrupting platform availability; or social engineering of quiXzoom staff is not covered by this policy and may be subject to legal consequences.
We publicly acknowledge researchers who responsibly disclose verified security vulnerabilities. Acknowledgement is made with the researcher's consent and is listed on our Security and Trust page.
quiXzoom does not operate a formal bug bounty programme at this time. We are grateful to the security community and consider every responsible disclosure a genuine contribution to the safety of our platform and its users.