REPORT
At nimly, we take the security of our products and services seriously. If you believe you have discovered a security vulnerability in a nimly product, software, app, or related service, we encourage you to report it to us.
This allows us to investigate and address potential security issues in a coordinated and responsible manner.
Send your report to:
development@nimly.io
Please use a clear subject line, for example:
Security Report – [productname or service]
To help us investigate the issue as efficiently as possible, please include the following information where relevant:
Please do not send more sensitive information, personal data, access codes, or other security-critical information than is necessary for us to understand and verify the issue.
When nimly receives a security report, we first assess whether the report concerns a potential security vulnerability in one of our products or services.
If the report is treated as a security matter, we will normally acknowledge receipt and request additional information if necessary.
We analyse and prioritise reported vulnerabilities based on factors including technical severity, affected products and services, potential exploitation, and the possible impact on our customers and users.
If a fix or other risk-reducing measure is required, it will be handled through our established development, testing, and deployment processes.
We ask that technical details of a potential security vulnerability are not made public before nimly has had reasonable time to investigate and address the issue.
This helps reduce the risk of vulnerability information being misused before a fix or other protective measures are available to affected customers and users.
Where public disclosure is relevant, we aim to coordinate this with the reporter and any other affected parties whenever possible.
If a confirmed security vulnerability requires action from customers or users, nimly will inform affected parties through appropriate channels.
This may include:
This contact channel is intended solely for reporting potential security vulnerabilities.
General support requests, installation or configuration issues, connectivity problems, warranty claims, and other matters without a security-related concern should be directed to nimly customer support through our regular support channels.
Personal data provided in connection with a security report will only be processed to the extent necessary to investigate and handle the report and to communicate with the reporter.
For more information about how nimly processes personal data, please see our Privacy Policy.
We appreciate customers, partners, and others bringing potential security issues to our attention.
Responsible reporting helps make nimly products and services safer for all our users.
