Security

Security is part of service quality. We aim to build and run software that behaves predictably, keeps sensitive values out of the browser, and fails safely when something goes wrong. We describe our practices here at a general level on purpose — publishing detailed internal information would not help anyone but an attacker.

• Secure development habits: code review, small reviewable changes, and type-checked builds
• Input validation on anything submitted through the website, including the contact form
• Least-privilege access: people and systems get only the access they actually need
• Credentials and configuration kept on the server side, never exposed to the browser
• Regular maintenance of software dependencies to pick up published fixes
• HTTPS for the published website
• Anti-abuse controls on contact submissions, including spam filtering and duplicate-submission protection

We would rather be accurate than impressive. We do not currently hold formal security certifications, and we do not operate a round-the-clock security operations centre, a paid bug bounty programme, or a published incident response service level. Where a client engagement needs specific security commitments, we agree those in writing for that project.

If you believe you have found a security issue in this website, please tell us privately before telling anyone else. Email support@aioptimustech.com and include:

• The affected URL or page
• Clear steps to reproduce what you found
• What the potential impact appears to be
• How we can reach you for follow-up questions

When testing, please:

• Do not access, change, or delete data belonging to anyone else
• Do not disrupt or degrade the service, and avoid destructive or high-volume testing
• Do not use social engineering, phishing, or physical attempts against our people
• Do not spam the contact form as part of testing
• Give us a reasonable opportunity to investigate and fix the issue before making it public

We appreciate reports made in good faith and will confirm receipt and keep you informed as we look into it. To be clear, this page is not a promise of a reward, bounty, or payment.

Security work is ongoing, and our practices will change as our systems and the wider threat landscape change. We will update this page when our approach changes materially. Questions can go to support@aioptimustech.com, or to the office address below.