Security & Responsible Disclosure

Our approach to security

Security is the core of what we do. We apply the same standards to our own systems that we build for our clients:

• Least-privilege access and multi-factor authentication for internal systems.
• Encryption of data in transit (TLS) and of sensitive data at rest.
• Client work is performed inside the client’s own accounts, under the client’s controls — data does not leave the client perimeter.
• Infrastructure managed as code, with change review and audit logging.
• Prompt patching of known vulnerabilities.

Responsible disclosure

We welcome reports from security researchers. If you believe you have found a vulnerability in this website or our systems, please tell us before disclosing it publicly, and give us a reasonable opportunity to fix it.

How to report

Email info@anyops.ai with the subject line “Security Disclosure”. Please include:

• A description of the issue and its potential impact.
• Clear steps to reproduce it (proof-of-concept where possible).
• Any affected URLs or components.

Our commitment

• We will acknowledge your report within 3 business days.
• We will keep you informed as we investigate and remediate.
• We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and follow this policy.

Please do not

• Access, modify, or delete data that is not your own.
• Run denial-of-service tests, spam, or social-engineering attacks.
• Publicly disclose the issue before we have resolved it.

Contact

For any security question, email info@anyops.ai.