Security reporting

Report privately

Email support@nourforge.com with the subject “Security report”. Include the affected product or service, version, steps to reproduce, observed impact and safe evidence. Encrypt or redact sensitive details where appropriate. Do not include licence keys, payment-card data or another person’s private information.

Safe research boundaries

Do not disrupt service, access or change data that is not yours, persist after access is demonstrated, use social engineering, test physical security, introduce malware, perform denial-of-service activity, or publicly disclose an unremediated issue. Research must remain lawful and within accounts, systems and data you are authorised to use.

What to expect

NourForge will aim to acknowledge a credible report, investigate it, request clarification where needed and communicate material progress when practical. Time to resolution depends on severity, reproducibility, release risk and third-party dependencies. This statement does not create a bug-bounty payment obligation.

Customer security incidents

If you suspect your purchase email, licence key or device has been compromised, contact support promptly. For unauthorised payment activity, also contact your payment provider. Preserve relevant records and avoid posting keys or private logs publicly.

Contact

Questions may be sent to support@nourforge.com.

NourForge is a registered business name of James Nour, sole trader. ABN 47 958 598 856. Victoria, Australia.