Security

Responsible Disclosure

If you discover a security issue related to ArbIQ, please report it to hello@arbiq.ch. Include enough detail to reproduce and understand the issue.

Scope

Public ArbIQ domains and public website assets are in scope unless otherwise agreed in writing. Do not access, alter, or exfiltrate non-public data.

Commitment

ArbIQ will review good-faith reports and coordinate fixes where needed. Public disclosure should happen only after the issue has been resolved.