Security Center
System Security
Learn about VANIKARA's commitment to secure data isolation, cryptographic keys, and responsible vulnerability reporting.
1. Data Isolation & Cryptography
We store user data using strict **Row-Level Security (RLS)** schemas hosted on Supabase clusters. This prevents any visitor nodes from accessing data profiles belonging to other tenants.
All database connections and API payload requests are encrypted in transit using **TLS 1.3** transport layers, and passwords/auth keys use cryptographically secure hashing functions.
2. Responsible Disclosure Program
We welcome reports from independent security researchers. If you identify a potential security issue (e.g. cross-site scripting, authentication bypass, data exposure), please report it to our engineering staff.
**Guidelines:**
- Provide detailed reproduction logs, request headers, or steps to verify the vulnerability.
- Avoid actions that disrupt node performances (such as denial-of-service tests or bulk scanning).
- Give our engineering team reasonable time (at least 14 days) to analyze and resolve the issue before publishing details.
3. Vulnerability Reporting Contact
Reports should be dispatched to: vanikara26@gmail.com.
For sensitive reports, you may request our pgp key or submit reports using encrypted email clients. Our team acknowledges reports within **48 hours** and schedules security patches immediately.