Reporting a security vulnerability

Last updated: 12 October 2026

If you think you have found a security vulnerability in ArchX – the desktop app, the licence service, the update feed or this website – please tell us. We take every report seriously.

How to report

• Write to support@frontierx.ch with the subject ‘Security’. The same address is in our security.txt file (RFC 9116) at /.well-known/security.txt.
• Describe what you found, how we can reproduce it, which version of ArchX is affected and what an attacker could do with it.
• Please do not include other people’s personal data, and do not access, change or delete data that is not yours.

What we do

• We acknowledge your report within 5 working days (Monday to Friday, Swiss working days).
• We look into it, keep you informed and tell you when it has been fixed.
• We fix vulnerabilities in the app through its update function and in the service directly; where a version must no longer be used, the app asks for the update before it accepts new work.
• With your agreement, we name you when we describe the fix.

Good faith

We will not take legal action against, or file a criminal complaint about, anyone who reports a vulnerability to us in good faith, gives us reasonable time to fix it before telling others, does not go further than needed to show the vulnerability, and does not harm our customers or their data. This promise binds TYTOS only; it cannot permit anything the law forbids, and it does not bind authorities or other people.