Security & responsible reporting

01. Protect your wallet information

Never send us a seed phrase, recovery share, private key, wallet password, or PIN. Do not include a wallet backup in a screenshot or attachment. The informational site has no feature that requires wallet access or a transaction signature.

02. Report a website issue

Email [email protected] with “Security report” in the subject. Describe the affected page or feature, what you observed, the time of the observation, and the potential impact. Include minimal reproduction steps and redacted evidence if it is safe to do so.

Do not include other people’s personal data or secrets. If a report needs sensitive technical material, ask us first to agree an appropriate transfer method. Ordinary email is not guaranteed to be confidential.

03. Stay within permission

Reporting a concern is not permission to access accounts, extract data, bypass controls, disrupt service, introduce malware, or test third-party infrastructure. Use only systems and test data you are authorised to use. Stop if you encounter personal information or risk affecting availability.

This page does not establish a bug-bounty programme, promise a reward, or grant legal safe harbour. Any testing beyond ordinary observation requires appropriate authorisation.

04. Phishing and impersonation

If you suspect someone is impersonating VAULTORA, send the URL or redacted message headers to [email protected]. Avoid interacting with suspicious attachments or signing a transaction as a supposed verification step.

Product-news requests on this website are sent by email. They do not require payment, an account password, a wallet connection, or recovery information.

05. Security claims and response

The visual design of a device is not proof of its security. This website does not claim that a production VAULTORA device has passed independent certification or audit.

Reports are reviewed as relevant information becomes available. No fixed response time or continuous incident-response coverage is promised on this informational website. For immediate loss or compromise involving another service, use that service’s verified support and emergency channels.