Security & Abuse Reporting

The security and privacy of AZOAD users are paramount. We welcome vulnerability disclosures and security inquiries from researchers and the community.

Vulnerability Disclosure

If you discover a security vulnerability in our web client, mobile application, API endpoints, or repository ingestion pipeline, please report it to:

security@azoad.com

Security Baseline

• Strict TLS/HTTPS enforcement on all endpoints
• Subdomain isolation and wildcard DNS routing protection
• Standardized Request ID tracing (X-Request-Id) across microservices
• Server-side authorization for all administrative and moderation operations
• Zero credential logging policy