Reporting a security issue
Opus Nebula takes the security of our systems and our clients’ data seriously. If you believe you have found a security vulnerability in our website or in Reporting as a Service, we would like to hear from you.
How to report
Email security@opus-nebula.com with:
- the affected website address, system or component
- a description of the issue and why you believe it is a security problem
- the steps needed to reproduce it
- any supporting evidence, such as screenshots or logs
Please write in English. If you would like to encrypt your report, contact us and we will arrange a secure method.
What we ask of you
- Give us a reasonable opportunity to investigate and fix the issue before disclosing it publicly or to any third party.
- Do not access, modify, copy or delete data belonging to Opus Nebula, our clients or their customers. If you encounter personal data, stop and tell us straight away.
- Do not carry out testing that could disrupt our service, including denial of service testing, automated scanning at volume, social engineering of our staff or clients, or any physical attempt to access our premises or those of our suppliers.
- Do not attempt to access accounts or systems that do not belong to you.
What you can expect from us
- We will acknowledge your report within five working days.
- We will investigate and keep you updated on our progress.
- We will tell you when the issue has been resolved.
- We will not take legal action against anyone who reports an issue in good faith and follows this policy.
Scope
This policy covers the Opus Nebula website at www.opus-nebula.com and the Reporting as a Service platform.
It does not cover services operated by third parties on infrastructure outside our control. Issues in those services should be reported to the provider concerned.
We do not operate a bug bounty programme and do not offer payment for reports. We are grateful for responsible disclosure and will credit reporters on request once an issue is resolved.
Existing clients
If you are an Opus Nebula client, please continue to raise issues through your usual support route so they reach the right team quickly. This page is for anyone without a support relationship with us.
Last reviewed: September 2026