Oximy Sensor's source code is open for transparency, audit, and verification. This allows organizations to inspect exactly what runs on their devices—no black boxes.

Please do not report security vulnerabilities through public GitHub issues.

To report a security vulnerability, please email security@oximy.com.

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 5 business days
• Resolution timeline: Communicated after assessment

We appreciate responsible disclosure and will credit researchers (if desired) once the issue is resolved.