Trust Center & Vulnerability Disclosure Policy (VDP)
Scope, safe-harbor guidelines, and security contact details for Vortex Relay public evaluation sandboxes.
In-Scope Evaluation Targets
RFC 9116 compliant
| Environment | Release | Primary Endpoints | Status |
|---|---|---|---|
| Production LTS Demo Sandbox | v2.14.8-LTS | /api/v1/schemas/import · /api/v1/upstreams/probe · /api/v1/proxy | In Scope |
| Pre-Production v3 Cloud Sandbox | v3.0.0-rc.2 | /api/v1/webhooks/test · /api/v1/proxy · /actuator/* | In Scope |
Reporting & Architecture Notes
Vortex Relay evaluation sandboxes run on dedicated AWS EC2 nodes in eu-central-1 with stage-isolated configuration parameters in AWS Systems Manager Parameter Store (/prod/vortex/* and /preprod/vortex/*) and artifact storage in Amazon S3 (vortex-artifacts-*).
To report a security issue, contact secops@vortex-relay.de as listed in /.well-known/security.txt.