Security & Abuse

    How to report a security vulnerability, or abuse coming from our network.

    Last updated: 2026-10-06

    Reporting a security vulnerability

    If you think you have found a security vulnerability in Sterile Networks — the website, the dashboard, the API or our network — please email security@sterile.network.

    Please include:

    • What you found and where (a URL, an API endpoint or an IP address)
    • The steps to reproduce it, and the impact you believe it has
    • Any proof of concept, screenshots or logs

    What you can expect from us:

    • We acknowledge your report within 3 business days.
    • We keep you updated while we investigate and fix it.

    We do not run a paid bug bounty, so we cannot offer money or other rewards for reports.

    Guidelines

    • Only test against accounts and services you own, or that you have explicit permission to test.
    • Do not access, change or delete other customers' data. If you come across any, stop, and tell us what you saw.
    • Do not run denial-of-service tests, attack our network or edge nodes, or try social engineering against our staff or customers.
    • Give us reasonable time to fix the issue before you share it with anyone else.

    If you follow these guidelines and act in good faith, we will not take legal action against you for your research.

    Usually out of scope

    • Findings from automated scanners without a demonstrated impact
    • Missing best-practice headers or settings with no practical exploit
    • Rate limiting on endpoints that do not handle sensitive data
    • Issues that require a compromised device or physical access

    Reporting abuse from our network

    Sterile Networks protects and routes traffic for its customers, so their services can be reachable through IP addresses we announce. To report abuse coming from one of those addresses — attacks, spam, phishing, malware or other misuse — email abuse@saastack.llc. It is the same abuse contact listed in the internet registry records for our IP ranges.

    Please include:

    • The IP address or addresses involved
    • When it happened, including the time zone
    • What happened, with logs or email headers where you have them

    We review every report and act under the acceptable use rules in our Terms of Service (section 3), which can include suspending the service involved.

    Under attack yourself?

    This page is for reporting problems with Sterile Networks. If your own service is being attacked, use the Under Attack button at the top of our website, or open a support ticket from your dashboard if you are already a customer.