Aelyra

Measures

Aelyra uses authentication, authorization checks, encrypted integration secrets, security headers, rate limiting, object-storage deletion, redacted logging, and privacy gates.

Production deployment must use HTTPS, HSTS, secure cookies, secret management, restricted database access, and monitored backups.

User responsibilities

Users should use a strong password, protect their email account, and report suspected unauthorized access to TO BE CHANGED: security@aelyra.example.

Vulnerability reports

Do not submit vulnerability reports through public social features. Use the security contact and include enough detail to reproduce the issue.

Aelyra does not currently operate a paid bug bounty program. TO BE CHANGED if a program launches.