ORBITRA / SECURITY
Report a security concern.
Help us understand the issue without putting customer systems or information at risk.
Start with a private report.
Email security@orbitrasecurity.com.
If the evidence is sensitive, describe the issue first without attaching secrets or customer data and ask for an appropriate transfer method.
Make the issue reproducible.
- The affected Orbitra URL, service, or feature.
- A clear description of the behavior and potential impact.
- Minimal reproduction steps using accounts and data you control.
- The approximate time, including timezone.
- A way to contact you about the report.
Do not send passwords, access tokens, session cookies, or unredacted customer records.
Keep testing within an agreed scope.
This page does not authorize testing of Orbitra systems; testing beyond normal use of the public website needs Orbitra’s prior written agreement. Customer tenants and third-party services are not Orbitra’s to authorize.
Avoid disruption, accessing other people’s data, or modifying records.
How we handle a report.
We acknowledge reports within five business days, keep you informed while we investigate, and tell you when the issue is resolved. Please give us a reasonable time to fix an issue before disclosing it publicly.