Send suspected security issues to [email protected] with the subject line Security Report. Include affected URL or product surface, reproduction steps, impact, and any relevant screenshots or logs.

Do not include secrets, personal data from other users, provider content, payment data, or exploit code beyond what is needed to understand the report.

Limit testing to accounts, devices, workspaces, servers, and data you own or are explicitly authorized to test.

Do not perform destructive testing, denial-of-service testing, social engineering, physical attacks, spam, credential stuffing, persistence, data exfiltration, or testing that degrades service for others.

OmniLux is building security controls around account access, billing handoff, relay grants, entitlement leases, provider workflows, managed-media grants, operator overrides, worker secrets, and gaming host setup.

Important security-sensitive actions should leave audit records sufficient for support, incident response, rights review, and recovery.

Security planning should include least-privilege access, multifactor administrative access, secret management, encryption in transit, secure defaults, dependency and vulnerability review, backup and recovery planning, logging, monitoring, and tested incident response.

OmniLux should avoid storing full payment card numbers. Payment card collection, storage, processing, and transmission should stay within Stripe or another payment provider that maintains the required payment-card security controls.

Provider, operator, billing, authentication, relay, and managed-media systems may involve sensitive operational data and should be scoped, segmented, and reviewed before production launch.

OmniLux maintains internal incident-response and breach-notification planning for customer, provider, operator, payment, authentication, relay, and managed-media events.

If a confirmed incident requires user, provider, or regulator notice, OmniLux will coordinate notice content, timing, and recipients with counsel and applicable law.