183 lines
8.7 KiB
HTML
183 lines
8.7 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="UTF-8" />
|
||
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
|
||
<title>Security Policy · PearDock Legal</title>
|
||
<meta name="description" content="Security vulnerability disclosure policy for PearDock by HoneyPeer, LLC." />
|
||
<meta name="keywords" content="PearDock security policy, vulnerability disclosure" />
|
||
<meta name="author" content="HoneyPeer, LLC" />
|
||
<meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />
|
||
<meta name="googlebot" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />
|
||
<meta name="theme-color" content="#2dd4bf" />
|
||
<meta name="color-scheme" content="dark light" />
|
||
<meta name="application-name" content="PearDock" />
|
||
<meta name="apple-mobile-web-app-title" content="PearDock" />
|
||
<meta name="apple-mobile-web-app-capable" content="yes" />
|
||
<meta name="mobile-web-app-capable" content="yes" />
|
||
<meta name="msapplication-TileColor" content="#2dd4bf" />
|
||
<meta name="msapplication-config" content="/assets/favicons/browserconfig.xml" />
|
||
<meta name="format-detection" content="telephone=no" />
|
||
<link rel="canonical" href="https://peardock.boats/legal/security" />
|
||
<link rel="alternate" hreflang="en" href="https://peardock.boats/legal/security" />
|
||
<link rel="alternate" hreflang="x-default" href="https://peardock.boats/legal/security" />
|
||
|
||
<!-- Open Graph -->
|
||
<meta property="og:type" content="article" />
|
||
<meta property="og:site_name" content="PearDock" />
|
||
<meta property="og:locale" content="en_US" />
|
||
<meta property="og:url" content="https://peardock.boats/legal/security" />
|
||
<meta property="og:title" content="Security Policy · PearDock Legal" />
|
||
<meta property="og:description" content="Security vulnerability disclosure policy for PearDock by HoneyPeer, LLC." />
|
||
<meta property="og:image" content="https://peardock.boats/assets/brand/og-image.png" />
|
||
<meta property="og:image:secure_url" content="https://peardock.boats/assets/brand/og-image.png" />
|
||
<meta property="og:image:type" content="image/png" />
|
||
<meta property="og:image:width" content="1200" />
|
||
<meta property="og:image:height" content="630" />
|
||
<meta property="og:image:alt" content="PearDock: decentralized Docker management on HyperDHT" />
|
||
|
||
<!-- Twitter / X -->
|
||
<meta name="twitter:card" content="summary_large_image" />
|
||
<meta name="twitter:title" content="Security Policy · PearDock Legal" />
|
||
<meta name="twitter:description" content="Security vulnerability disclosure policy for PearDock by HoneyPeer, LLC." />
|
||
<meta name="twitter:image" content="https://peardock.boats/assets/brand/twitter-card.png" />
|
||
<meta name="twitter:image:alt" content="PearDock: decentralized Docker management" />
|
||
|
||
<!-- Icons & PWA -->
|
||
<link rel="icon" href="/assets/favicons/favicon.ico" sizes="any" />
|
||
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
|
||
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
|
||
<link rel="icon" type="image/png" sizes="48x48" href="/assets/favicons/favicon-48x48.png" />
|
||
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
|
||
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
|
||
<link rel="mask-icon" href="/assets/logo/peardock-wordmark.svg" color="#2dd4bf" />
|
||
|
||
<!-- Article -->
|
||
<meta property="article:section" content="Legal" />
|
||
<meta property="article:author" content="HoneyPeer, LLC" />
|
||
<meta property="article:publisher" content="HoneyPeer, LLC" />
|
||
|
||
<script type="application/ld+json">
|
||
{
|
||
"@context": "https://schema.org",
|
||
"@type": [
|
||
"WebPage",
|
||
"WebPage"
|
||
],
|
||
"name": "Security Policy \u00b7 PearDock Legal",
|
||
"description": "Security vulnerability disclosure policy for PearDock by HoneyPeer, LLC.",
|
||
"url": "https://peardock.boats/legal/security",
|
||
"isPartOf": {
|
||
"@type": "WebSite",
|
||
"name": "PearDock",
|
||
"url": "https://peardock.boats"
|
||
},
|
||
"publisher": {
|
||
"@type": "Organization",
|
||
"name": "HoneyPeer, LLC",
|
||
"url": "https://peardock.boats"
|
||
},
|
||
"inLanguage": "en-US",
|
||
"primaryImageOfPage": {
|
||
"@type": "ImageObject",
|
||
"url": "https://peardock.boats/assets/brand/og-image.png",
|
||
"width": 1200,
|
||
"height": 630
|
||
}
|
||
}
|
||
</script>
|
||
|
||
<link rel="preconnect" href="https://fonts.googleapis.com" />
|
||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
|
||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet" />
|
||
<link rel="stylesheet" href="/src/styles/global.css" />
|
||
<link rel="stylesheet" href="/src/styles/docs.css" />
|
||
<link rel="stylesheet" href="/src/styles/legal.css" />
|
||
</head>
|
||
<body>
|
||
<div class="bg-mesh" aria-hidden="true"></div>
|
||
<div data-nav data-prefix="../"></div>
|
||
|
||
<div class="docs-layout legal-layout">
|
||
<aside class="docs-sidebar" data-legal-nav></aside>
|
||
<button type="button" class="docs-sidebar-toggle" aria-label="Legal menu">☰</button>
|
||
|
||
<article class="docs-main legal-main">
|
||
<p class="legal-kicker">Legal</p>
|
||
<h1>Security Policy</h1>
|
||
<p class="docs-lead">
|
||
HoneyPeer, LLC takes the security of PearDock seriously.
|
||
This policy describes how to report vulnerabilities responsibly.
|
||
</p>
|
||
<p class="legal-updated">Last updated: <strong>July 11, 2026</strong></p>
|
||
|
||
<h2 id="scope">1. Scope</h2>
|
||
<p>In scope:</p>
|
||
<ul>
|
||
<li>PearDock server and client software as published by HoneyPeer;</li>
|
||
<li>Official installers and websites (peardock.boats, install.peardock.boats);</li>
|
||
<li>Cryptographic handling of peer identity and RPC transport where implemented by PearDock.</li>
|
||
</ul>
|
||
<p>Generally out of scope:</p>
|
||
<ul>
|
||
<li>Issues solely in third-party dependencies without a demonstrated impact on PearDock (report upstream when appropriate);</li>
|
||
<li>Social engineering of HoneyPeer staff;</li>
|
||
<li>Denial-of-service volume testing against production Sites without prior coordination;</li>
|
||
<li>Findings that require physical access or already-compromised admin credentials on the target host.</li>
|
||
</ul>
|
||
|
||
<h2 id="report">2. How to report</h2>
|
||
<p>
|
||
Email <a href="mailto:[email protected]">[email protected]</a> with:
|
||
</p>
|
||
<ul>
|
||
<li>description of the issue and potential impact;</li>
|
||
<li>steps to reproduce or proof-of-concept (non-destructive);</li>
|
||
<li>affected versions / commit / platform if known;</li>
|
||
<li>your contact details and any preferred credit name.</li>
|
||
</ul>
|
||
<p>Please use English if possible. Do not include sensitive personal data of third parties.</p>
|
||
|
||
<h2 id="safe">3. Safe harbor</h2>
|
||
<p>
|
||
If you make a good-faith effort to follow this policy, avoid privacy violations, service disruption, and data destruction,
|
||
and do not exploit the issue beyond what is necessary to demonstrate it, HoneyPeer will not pursue legal action against you
|
||
for that research under laws applicable to unauthorized access, to the extent we can bind ourselves.
|
||
This does not authorize attacks on third-party systems or users’ self-hosted instances without their permission.
|
||
</p>
|
||
|
||
<h2 id="process">4. Our process</h2>
|
||
<ul>
|
||
<li>We will acknowledge receipt when practicable;</li>
|
||
<li>We will investigate and may request more detail;</li>
|
||
<li>We aim to remediate or mitigate high-severity issues in a reasonable timeframe;</li>
|
||
<li>We may publicly credit reporters who wish to be credited after a fix is available.</li>
|
||
</ul>
|
||
<p>We do not guarantee a bug bounty payment unless a separate program is announced.</p>
|
||
|
||
<h2 id="operators">5. For operators</h2>
|
||
<p>
|
||
Production hardening guidance is available in the product docs:
|
||
<a href="/docs/security">Security & threat model</a> and
|
||
<a href="/docs/operator">Operator guide</a>.
|
||
Keep PearDock and Docker updated; protect <code>SERVER_SEED</code> and peer allowlists.
|
||
</p>
|
||
|
||
<h2 id="contact">6. Contact</h2>
|
||
<p>
|
||
Contact: <a href="mailto:[email protected]">[email protected]</a><br />
|
||
HoneyPeer, LLC · DeKalb County, Georgia, USA
|
||
</p>
|
||
|
||
<div class="docs-pager">
|
||
<a href="/legal/disclaimer"><span>Previous</span><strong>← Disclaimer</strong></a>
|
||
<a class="next" href="/legal/"><span>Hub</span><strong>All legal docs →</strong></a>
|
||
</div>
|
||
</article>
|
||
</div>
|
||
|
||
<div data-footer data-prefix="../"></div>
|
||
<script type="module" src="/src/js/site.js"></script>
|
||
</body>
|
||
</html>
|