Responsible Disclosure
SECURITY POLICY &
VULNERABILITY DISCLOSURE.
Cyronix Dev & Security treats security reports with the highest engineering priority. We welcome responsible disclosures from researchers, developers, and security auditors.
Supported Versions
Security patches and advisory bulletins are actively evaluated and backported for the following release branch:
| Release Line | Android Base | Support Status |
|---|---|---|
| CYRONIX OS 1.5.x | Android 11 (API 30) | ACTIVE SUPPORT |
| CYRONIX OS 1.4.x | Android 11 (API 30) | MAINTENANCE |
| CYRONIX OS 1.0–1.3 | Android 11 (API 30) | END OF LIFE |
Response Process & SLAs
- Initial Acknowledgment: Within 48 hours of report receipt.
- Triage & Reproducibility: Within 5 business days.
- Fix Timeline: Critical vulnerabilities aim for patched OTA delivery within 14 days.
- Coordinated Disclosure: Public advisory published alongside signed release zip.