Security & responsible disclosure
Report a potential security issue through a dedicated channel.
Novarra AI welcomes responsible reports about security issues affecting the public website or systems under its control. This page does not create a bug-bounty program, certification claim or guaranteed response SLA.
How to report
Make the report useful without increasing the risk.
Report privately
Use the dedicated security email rather than public posts or the commercial enquiry form.
Share the minimum needed
Include the affected URL or system, observed behavior, reproduction steps and relevant timestamps without sending unrelated personal or client data.
Avoid destructive testing
Do not disrupt service, access data you do not need, alter third-party information or use social engineering to demonstrate an issue.
Security contact
If sensitive details are required to validate a report, begin with a concise description and agree an appropriate handling route first.
Engagement security
Client evidence handling is agreed before sensitive access.
Security review, collaboration tools, AI use, access permissions and retention expectations are defined within the scope and handling model for the engagement.
See Trust & Confidentiality for the broader evidence-handling principles.
Last reviewed: 3 October 2026.