Security disclosure

If you believe you have found a security problem in Product Nerve AI, please tell us. This page explains how.

How to report

Email joshua.t@productnerve.com with the word Security in the subject. Tell us what you found, where you found it, and the steps to reproduce it. Please include only the information needed to show the problem.

What we ask of you

1. Tell us first, and give us a reasonable amount of time to fix the problem before you share the details with anyone else.
2. Do not access, change, or keep other people's data. Stop once you have shown that the problem exists.
3. Do not run tests that slow down or interrupt the service, such as heavy automated scans or denial of service attempts.

What is in scope

Our websites at productnerve.com and app.productnerve.com, the Product Nerve AI API that serves them, and our mobile apps. Problems in our AI features are in scope too, for example a way to make the AI show another customer's data or act outside its design.

What happens next

We read every report and reply to the address you used. We do not run a bug bounty program, so we cannot offer payment for reports.

This page is also published in machine readable form at /.well-known/security.txt.