Responsible Disclosure

Please read this before you report a vulnerability. Last update: 20/09/2026.

We take the security of our systems seriously. If you find a vulnerability, tell us so we can fix it. Work with us. Do not make it worse.

1. How to report

1.1 Email abuse@cyprusnode.com.

1.2 Do not exploit the issue beyond what is needed to show it. Do not download other people’s data, change it, or delete it.

1.3 Do not tell others until we have fixed it.

1.4 Give enough detail to reproduce it: URL or IP, a short description, and steps. Complex issues may need more.

2. What we do

2.1 We will thank you and reply as soon as we can, with an expected fix date when we have one.

2.2 We will not take legal action against you if you follow this page.

2.3 We handle the report in confidence. We will not pass on your details without your permission, except where the law requires it.

2.4 We may, in rare cases, offer store credit. That is our choice. There is no bounty programme and no right to payment.

3. Scope

3.1 In scope: cyprusnode.com, beta.cyprusnode.com, and systems we operate.

3.2 Out of scope: customer servers and websites; physical attacks; social engineering of staff; malware; DDoS; missing security headers; DNS misconfiguration; UI bugs and spelling mistakes; issues already reported.

3.3 This page is not an invitation to attack our customers.