Reporting a vulnerability
How to report a security problem in Nubo Suite and what to expect: write to support@nubo.email and we acknowledge within 5 business days.
Write to support@nubo.email with the steps to reproduce, the affected URL or app and the impact. We acknowledge reports within 5 business days (Monday to Friday, India), keep you updated and tell you when it is fixed.
What is in scope?
nubosuite.tech, home.nubosuite.tech, api.nubosuite.tech, the Nubo apps on *.nubosuite.tech and nubo.email. Out of scope: third-party services, denial-of-service testing, social engineering of staff or customers, and physical attacks.
What are the rules?
Test only against your own accounts. Do not read, change or delete other people’s data. Stop once you have shown the problem and give us a reasonable time to fix it before you share details.
Is there a bounty?
No. We do not run a paid bounty program at this time. We are glad to credit you if you want.
Where is the full policy?
Responsible Disclosure Policy. A dedicated security mailbox is not yet published; use support@nubo.email.