Security

SECURITY.md

Security Policy — NothingOS

Reporting

Report privately via GitHub Security Advisories. Response within 72h.

Scope

Device API authentication and session management
Real-time device command injection
User data and wearable telemetry privacy
Order and payment data exposure

There aren't any published security advisories