Report a weakness privately

Please send suspected security weaknesses with the subject “IcyZip security” to contact@icyzip.com.

Useful reports identify the affected function or protocol field, attacker prerequisites, impact and a small reproduction using synthetic data. Please do not send other people’s data, keys or active pairing links, and use only your own isolated test endpoints.

Full security policy and review scope

General bugs and ideas

For non-sensitive bugs, questions and ideas about the open code, submit an Issue without an account or email address. General app feedback is welcome through the feedback form as well. Please send undisclosed security findings through the private contact above.