Security
Report suspected security issues to admin@openmega.net. Include a clear description, affected URL or feature, steps to reproduce, impact, and any relevant screenshots or proof of concept. Do not include personal data or access data that is not yours.
Scope is the public site at openmega.net. Private subdomains are owner-only and out of scope for testing. Please report concerns about them; do not test them.
Please act in good faith, avoid privacy violations, service disruption, and accessing or changing other people's data. If you follow this policy, the owner will not pursue or support legal action for your good-faith research, to the extent permitted by law.
There is no bug bounty. You can expect acknowledgement within 7 days.