Responsible Disclosure Policy

NISTBox™ is committed to maintaining the security and integrity of our platform and services. We welcome responsible security research and encourage individuals to report potential vulnerabilities discovered in NISTBox™ systems.

If you believe you have identified a security vulnerability, please report it to NISTBox™ by submitting details to [email protected].

When conducting research, you are expected to act in good faith and avoid privacy violations or service disruption. You should not access, modify, or delete data belonging to others, and you should not exploit vulnerabilities beyond what is necessary to demonstrate the issue. Reports should include sufficient detail to allow our team to reproduce and resolve the issue.

NISTBox™ will investigate all legitimate reports and work to resolve verified vulnerabilities promptly. Under this policy, NISTBox™ will not pursue legal action against individuals who discover and report vulnerabilities in good faith and in accordance with these guidelines.