Security

How StaticOps limits risk.

The public website has no user login, application writes or raid data. Security issues are reported privately to the StaticOps administrator.

Report an issue

Public website

Astro generates static files served by Cloudflare Pages.

No application server
No form or user account
Restrictive security headers

StaticOps application

The dashboard API only responds on the local PC (127.0.0.1), and Windows protects stored secrets. Access to administration statistics is verified server-side through Discord and Supabase. Cloud snapshots are manual, private and isolated by account. Never attach a database, ACT log, webhook or FF Logs credentials to a public report.

Report a security issue

Join the StaticOps Discord, then contact the administrator privately. Include the version, impact and a minimal reproduction without personal data.

Acknowledgement targetWithin 72 hours