v2.0 · Revised 2026-11-03
Security & Responsible Disclosure
Practical safeguards and how to report a concern.
Account safeguards
Administrative passwords are hashed, sessions use random tokens stored as hashes, and API authorization checks restrict protected operations. Login bypass passwords and static session shortcuts are not supported. The deployment operator must use HTTPS, protect secrets, keep dependencies patched, control database access and maintain tested backups.
Report a vulnerability
Send a concise description, affected URL and minimal reproduction steps to support@dezoryn.com. Do not access other users’ information, disrupt service, perform destructive tests or publish private data. Do not include passwords or payment credentials.
Limitations
No system is risk-free. Security configurations depend on deployment and separately operated products. This page does not claim SOC 2 or ISO certification, universal AES-256 storage encryption, guaranteed uptime or a completed independent security audit.