Noxsentra is an early-stage cybersecurity and AI security research initiative under Magnexis. We welcome good-faith reports about security issues in software maintained by Noxsentra.

1. Check the affected repository for its own SECURITY.md and use any private vulnerability reporting option it explicitly provides.
2. If no secure reporting method is available, do not publish sensitive details or proof-of-concept exploits in a public issue. You may request a private point of contact using a public issue that contains no technical details, credentials, or identifying information.
3. Include affected versions, impact, reproduction conditions, and minimal evidence only through a secure reporting channel.
4. Allow reasonable time for investigation, remediation, and coordination before publishing technical details.

We will aim to acknowledge legitimate reports and coordinate on next steps, but do not currently promise a fixed response SLA, payment, or bounty.

This policy covers Noxsentra-controlled repositories only. It does not authorize testing of Magnexis projects, third-party services, other GitHub organizations, or infrastructure without the respective owner's explicit permission.

Avoid privacy violations, denial-of-service testing, persistence, lateral movement, social engineering, data exfiltration, and service disruption. Stop testing if you encounter sensitive information.

For vulnerabilities in third-party products, follow the affected vendor's disclosure policy or a recognized coordination process. Please do not send third-party secrets or exploit material to Noxsentra through public issues.

We value accurate reporting, responsible disclosure, and the safety of users and researchers.