Security
Report a security issue
If you find a vulnerability in neb (the site, the dashboard, the API or the chat widget), please tell us privately first.
How to report
Email hello@neb-app.com with "Security report" in the subject: what you found, where, and the steps to reproduce it.
What we ask
- Give us reasonable time to fix it before you share it publicly.
- Do not access, change or delete other people's data, and stop as soon as you can show the issue.
- No denial-of-service, spam, social engineering or physical attacks.
- Automated scanners trigger our defences and get blocked; manual, careful testing is welcome.
What we do
- We answer, investigate and tell you what we found.
- We will not take legal action against good-faith research that follows these rules.
Machine-readable: /.well-known/security.txt