Skip to content

Security: tsidevstudio/xsilent

Security

SECURITY.md

Xsilent Security Policy

Xsilent is a privacy-focused Android photo, video, PDF and file vault developed by TSI Dev Studio.

This public repository contains product information and documentation. The Xsilent application source code, internal architecture and security-sensitive implementation details are not published here.

Reporting a security issue

If you believe you have found a security vulnerability affecting Xsilent, please report it privately.

Security contact: support@tsidevstudio.com

Please do not publish suspected vulnerabilities, exploit details, proof-of-concept material or sensitive technical findings in public GitHub Issues, discussions, social media posts or other public channels before TSI Dev Studio has had a reasonable opportunity to review them.

What to include

A useful report may include:

  • A clear description of the issue.
  • The affected Xsilent version, if known.
  • The Android version and device model used for testing.
  • Reproduction steps that do not require disclosure of unrelated personal data.
  • The expected behavior and the observed behavior.
  • Screenshots or screen recordings where appropriate.
  • Any relevant impact assessment.

Please avoid sending private user content, credentials, authentication data or unrelated personal information.

Responsible disclosure

TSI Dev Studio asks researchers and users to act responsibly and in good faith.

Please:

  • Avoid accessing, modifying or deleting data that does not belong to you.
  • Avoid actions that could degrade availability for other users.
  • Avoid social engineering, phishing or physical attacks.
  • Avoid public disclosure before the issue has been reviewed.
  • Stop testing if you discover information belonging to another person.

Scope

Security reports may concern publicly released versions of Xsilent distributed through official TSI Dev Studio channels.

The public repository itself is documentation-only and does not contain the Xsilent application source code.

Public security information

Implementation details

For security and intellectual-property reasons, TSI Dev Studio does not publish:

  • Application source code.
  • Internal class or package structure.
  • Cryptographic key-management implementation details.
  • Internal vault or backup formats.
  • Decoy access implementation logic.
  • Anti-tamper or internal integrity mechanisms.
  • Security-sensitive storage layouts.
  • Internal authentication or access-control decision flows.

Public documentation focuses on user-visible behavior, supported features and safe usage.

Contact

TSI Dev Studio
https://tsidevstudio.com
support@tsidevstudio.com

There aren't any published security advisories