How to report
Email a concise description, affected route, expected result, observed result and safe reproduction steps.
security@roccoanalysis.mePUBLIC SECURITY CHANNEL · EARLY ACCESS
Report security issues responsibly.
RoccoTerminal is an Early Access trading workspace. Reports about account isolation, authentication, private evidence, wallet-label privacy, desktop downloads or unintended data exposure are treated as launch-critical.
Do not include
Never send passwords, session cookies, seed phrases, private keys, exchange credentials, recovery codes, identity documents or another member's private data.
Safe testing
Use only accounts and data you own. Do not degrade availability, automate destructive traffic, bypass payment or membership controls, or access another person's workspace.
Response process
- The report is acknowledged and classified by impact.
- Reproduction is attempted without requesting sensitive credentials.
- A containment or remediation plan is prepared before public disclosure.
- The reporter is updated when the issue is fixed or determined not to be exploitable.