AuskBack to ausk.io

Security & Responsible Disclosure

Last Updated: 2026

Ausk takes the security of its software seriously. This page explains how to report issues responsibly and what researchers can expect when engaging with the product in good faith.

We appreciate the efforts of security researchers and community members who help us identify vulnerabilities and improve the safety of the application.

This page describes how to responsibly report security issues related to the Ausk application.

1. Reporting a Security Vulnerability

If you believe you have discovered a security vulnerability in the Ausk software, please report it to us as soon as possible.

Please send your report to: support@ausk.io

We aim to acknowledge vulnerability reports within a reasonable timeframe and investigate them promptly.

  • a description of the vulnerability
  • steps required to reproduce the issue
  • any proof-of-concept code or screenshots
  • the potential impact of the vulnerability

2. Responsible Disclosure Guidelines

We ask security researchers to follow responsible disclosure practices:

  • do not publicly disclose the vulnerability until it has been addressed
  • avoid accessing or modifying data that does not belong to you
  • avoid actions that could harm users, systems, or infrastructure
  • only test vulnerabilities on systems that you own or are authorized to test

3. Scope

Security reports may include issues related to:

Reports related to third-party software, external tools, or the Microsoft Store platform are outside the scope of this policy.

  • the Ausk desktop application
  • the Ausk website (https://ausk.io)

4. Safe Harbor

If you follow the guidelines in this policy and act in good faith, Ausk will not pursue legal action against you for reporting security vulnerabilities. We appreciate responsible disclosure that helps protect the security of our users.

5. Security Practices

Ausk is a fully offline, local-first application. It makes no network requests and collects no user data, including IP addresses, device information, or analytics of any kind. All project files and version-control data are stored exclusively on the user's device.

Because nothing is transmitted externally, there is no server-side attack surface related to user data. Application distribution and updates are handled entirely through the Microsoft Store, which maintains its own security infrastructure and practices.

6. Contact

For security-related inquiries:

support@ausk.io

For general product support:

support@ausk.io

support@ausk.io