Security Policy

AmplifiedAccess takes the security of WatchTower seriously. We appreciate the efforts of security researchers and community members who help us keep the platform safe for everyone.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them directly to our team by emailing:

• noble@amplifiedaccess.org
• aziz@amplifiedaccess.org

You should receive a response within 48 hours. If you do not, please follow up via email to confirm we received your original message.

To help us triage your report as quickly as possible, please include as much of the following as you can provide:

• Type of issue (e.g. SQL injection, cross-site scripting, authentication bypass, privilege escalation, etc.)
• Full paths of the source file(s) related to the manifestation of the issue
• The location of the affected code — branch, commit hash, or direct URL
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code, if possible
• Impact of the issue, including how an attacker might exploit it

AmplifiedAccess follows the principle of Coordinated Vulnerability Disclosure. We ask that you give us a reasonable amount of time to investigate and address a reported issue before any public disclosure.

We will keep you informed of our progress throughout the investigation and credit you for your discovery if you wish.

We prefer all security communications to be in English.