Snapshot 224234
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Trust Center cloud66.com status.cloud66.com security@cloud66.com Scope In-Scope Assets Asset Type Bounty *.cloud66.com Domain TBD Disclosure Policy Report vulnerabilities to security@cloud66.com. Please do not use public channels such as GitHub issues, support chat or social media. Include the affected URL or component, a description of the issue and its impact, and steps to reproduce. Our timeline Acknowledgement within 2 business days Initial assessment within 7 business days Fixes prioritized by severity; we aim to resolve critical issues within 30 days Public disclosure coordinated with you, normally once a fix is live and no later than 90 days after your report Rules of engagement Test only against accounts and servers you own Do not access, change or delete other customers' data No denial-of-service, social engineering or physical attacks Keep details confidential until we have fixed the issue or agreed a disclosure date We will not take legal action against researchers who act in good faith and follow this policy. With your permission, we will credit you once the issue is fixed. Accepted Reports We accept reports affecting the Cloud 66 website, dashboard, API, command-line toolbelt, server agents and our open-source projects, including: Authentication and authorization flaws, including access to another account's data Remote code execution and injection (SQL, command, template) Cross-site scripting, CSRF and server-side request forgery Exposure of secrets, credentials or customer data Privilege escalation on servers managed by Cloud 66 Not accepted unless you can show a practical security impact: Missing security headers, cookie flags or email records (SPF, DKIM, DMARC) Clickjacking on pages with no sensitive actions Rate-limiting reports without a working exploit Version or banner disclosure, and unverified scanner output Issues in customer-deployed applications or third-party services Report a vulnerability Found a security issue covered by this program? Submit it to Cloud 66's security team for review.