AxisOption values responsible security research and the private disclosure of potential vulnerabilities affecting its public services.
Please do not open a public GitHub Issue for security-sensitive findings.
Send reports privately to:
admin@axisoption.com
Subject: [SECURITY] Vulnerability Report
You may also use the official contact channel at:
https://axisoption.com/contact.html
A useful report should contain, where applicable:
- Affected URL, endpoint, application flow, or component
- Clear description of the observed behavior
- Potential security impact
- Minimal, non-destructive reproduction steps
- Relevant screenshots, logs, request/response details, or timestamps
- Redacted evidence only — never include another user's private data
- Suggested remediation, if available
Security research must be performed in good faith and without harming users, data, systems, or service availability.
Please do not:
- Access, retain, modify, or disclose another user's information
- Attempt destructive testing or denial-of-service activity
- Perform social engineering, phishing, credential theft, or physical attacks
- Exfiltrate confidential information or production secrets
- Publish an unresolved vulnerability before AxisOption has had a reasonable opportunity to review it
If a proof of concept is needed to demonstrate impact, use the minimum activity required and stop once the issue has been confirmed.
This GitHub organization is a public brand and technology showcase. Proprietary trading logic, credentials, production secrets, user data, private infrastructure configuration, and other security-sensitive operational material are not intentionally published here.
A vulnerability affecting the public website, authentication/account flow, trading interface, or another AxisOption-operated public service can still be reported through the private channel above.
Security reports are handled separately from account or service support.
For account access, platform usage, funding/withdrawal enquiries, demo assistance, or general client service, use:
https://axisoption.com/contact.html
Please verify that any communication claiming to represent AxisOption points back to an official AxisOption domain or an official channel published on the website.