Security
Report a weakness, or an impostor.
Two kinds of report go to the same inbox: a security issue in this website or the firm’s email, and someone using the firm’s name.
- Reports to
- compliance@cipherg.io
- Bounty
- None
- Machine-readable
- security.txt
Security issue
A security issue.
Found a weakness in cipherg.io or the firm’s email? Tell us.
- What this covers: the website at cipherg.io, and email sent from or to the firm’s addresses.
- A weakness in a page, a script or a header; a way to send mail that looks as if it came from the firm; anything that exposes information it should not.
- Write to compliance@cipherg.io, with “Security report” as the subject.
- Say what is affected (a page’s address, or an email’s sender and date), what you found, how to see it again, and how to reach you.
- Please stop once you can show the issue.
- Don’t open data that isn’t yours, change anything, or slow down the site or the mail. Give us a chance to look before you make it public.
- There is no bounty and no reward.
- Reports are welcome all the same.
- We read every report.
Impersonation
Someone using our name.
If someone offers you one of the things below in the firm’s name, it isn’t us.
What the firm never does
- Take clients, open accounts or manage anyone’s money.
- The firm trades only its own capital.
- Take outside money, or ask for any.
- It is not raising money, and nothing on this site is an offer.
- Give tips, signals, predictions or trade ideas.
- The research explains mechanics with made-up numbers, and none of it is advice.
- Run a paid group, a tips newsletter or a copy-trading service.
- Send direct messages offering anything, on any platform.
To report it
- Write to compliance@cipherg.io, with “Impersonation report” as the subject.
- Say where you saw it (the platform, and the account’s name or link), when, and what was offered. A screenshot helps.
- Report the account to the platform where you saw it, too.
- Don’t send money or personal details to anyone offering one of the things above.
- The firm speaks only through its official channels.
- This site, cipherg.io; email from @cipherg.io addresses; its LinkedIn company page; @CipherGio on X; @ciphergio on Threads; and @ciphergio on Instagram. An account anywhere else that uses its name isn’t the firm. The firm’s LinkedIn company page.
Both reports
Security issues and impersonation reports go to compliance@cipherg.io. The same address is in the site’s security.txt, which points here.