Omny Studio believes the security research community provides a valuable service to society ensuring companies are held accountable for the privacy and security of information retained on its customers. We value the efforts put forth by this community and are committed to working collaboratively with security researchers to confirm, replicate, and respond to legitimate reported vulnerabilities. We encourage security researchers to notify us of any identified security vulnerabilities following our vulnerability disclosure process outlined below.
If you have identified a security vulnerability and would like to report it to us, please send an email to security@omnystudio.com. Please be sure to include your name, contact information, and company name (if applicable). Please do not include any vulnerability information in the initial email. We will respond to your email with an encrypted session to ensure the security and privacy of information sent and received. Any subsequent correspondence will be secured through encrypted channels and may include vulnerability details.
We will investigate legitimate reports of security vulnerabilities and make an effort to resolve them as soon as reasonably possible. To show good faith and encourage responsible reporting and as long as you comply with our reasonable requests, we promise to not take legal action against you or enlist the assistance of law enforcement to investigate you if you follow our guidelines for responsible disclosure noted below:
We will attempt to respond to your report within 1-2 business days of receiving it.
Omny Studio would like to thank the following people who have contributed to improving our security.