# Security policy · Terranoux

Source: https://terranoux.com/security

Report vulnerabilities privately to benjamin@lucidrail.com with subject "Terranoux security". Do not open a public issue for a security defect.

In scope: this website (terranoux.com) and its Vercel deployment; the source repository as it relates to the site; the /admin passkey authentication and stored brief intake data.

Out of scope: social-engineering or physical attacks; denial of service; findings that require an already-compromised device or account; missing security headers on third-party hosts.