Get started
Security.rtf

Security

Vulnerability disclosure policy

Found a security problem in Silicon Network? We want to hear about it. This page says how to report it, what we ask while you look, and what you can expect from us.

Last updated October 28, 2026.

How to report

Email security@siliconnetwork.io with what you found, where, the steps to reproduce it and what an attacker could do with it. English, German and Spanish are all fine. The same contact is in security.txt.

Please do not post security problems in public issues, chats or social media before they are fixed.

In scope

  • The website and dashboard at www.siliconnetwork.io
  • The API at api.siliconnetwork.io and the relay at relay.siliconnetwork.io
  • The control plane behind the dashboard and the API
  • The Silicon Network engine and node software, on a Mac you own

Out of scope

  • Denial of service, load and volume testing
  • Social engineering, phishing and physical attacks
  • Services we use that others run, such as hosting, payments and sign-in; please report those to them
  • Other customers' accounts and data, and Macs run by other operators
  • Scanner output without a shown impact

What we ask

  • Test only with accounts, keys and machines that are yours, or that you have permission to use
  • Access no more data than you need to show the problem, and delete it once you have reported it
  • Do not slow down or break the service for anyone else
  • Do not use social engineering against our team or our users
  • Give us reasonable time to fix the problem before you tell anyone else

What we commit to

  • We aim to acknowledge your report within three business days
  • We keep you informed while we look into it and fix it
  • We tell you when it is fixed
  • We credit you in our release notes if you want, and leave your name out if you prefer

Rewards

There is no paid bug bounty program today. Every report is welcome, and we will thank you in public if you want.

Good faith

If you follow this policy and act in good faith, we will consider your research authorized and will not take legal action against you for it.

This is a statement of our intent, not legal advice. It covers Silicon Network only and cannot waive the rights of anyone else, such as other customers, operators or the providers we use. If you are not sure whether something is allowed, ask us first.