Oxaa
Sign inDownload
  1. Localhost. Online. Without opening your network.
  2. Security overview
  3. Vulnerability disclosure

Secure public endpoints for local development

Vulnerability disclosure

Vulnerability disclosure: practical workflow, product behavior, limits, evidence and the exact next step with Oxaa.

Fast answer

Vulnerability disclosure answers a trust question with architecture, controls, failure behavior and evidence. It does not rely on a badge, an adjective or a future certification.

Technical details

  • scope and report channel
  • safe-harbor language only after legal approval
  • information to include
  • sensitive-data handling
  • acknowledgment and response expectations
  • coordinated disclosure
  • out-of-scope abuse and support requests

What Oxaa is - and is not

Oxaa is development connectivity for a selected local HTTP or HTTPS service while the enrolled device and authenticated route are live. It is not application hosting, a general VPN, a forward proxy, permanent production deployment, raw TCP/UDP tunneling, arbitrary TLS passthrough, a CDN/WAF replacement or a production webhook delivery platform.