# AppTesters Security

> Machine-readable summary of public AppTesters security practices and security-reporting paths.

This is a machine-readable summary. The official security page at [https://apptesters.org/security](https://apptesters.org/security) is authoritative for public security information.

## Official Security Page

- Canonical URL: [https://apptesters.org/security](https://apptesters.org/security)

## Public Security Statements

The security page states that AppTesters separates the public website, cloud data, and payment providers. It says the website hosting layer is separate through Cloudflare, account/order/device data is stored in Google Cloud, and card details are handled by Stripe, PayPal, and other payment providers rather than stored on AppTesters servers.

The security page states that account data, orders, queue information, and device IDs live in Cloud (Google Cloud), and that AppTesters uses HTTPS, access hardening, dependency patching, monitoring/logging, and backups.

The security page states AppTesters does not store Apple ID passwords and does not need them.

## Security Advisories

AppTesters publishes security advisories under the Security section when important incidents occur.

- [Security Advisory: React2Shell, December 2025](https://apptesters.org/security/advisories/react2shell-2025-12)

## Reporting a Security Issue

The security page asks users to report potential vulnerabilities by email:

- [help@apptesters.org](mailto:help@apptesters.org?subject=Security%20issue%20report)

Reports should include a clear description and steps to reproduce. Screenshots should mask or redact sensitive personal data where possible.

## Responsible Disclosure Guidelines

The security page asks reporters to use test data when possible, give AppTesters reasonable time to investigate and fix before public disclosure, avoid accessing other users' accounts or data, and avoid denial-of-service attacks or spam.

## Related Resources

- [Security at AppTesters](https://apptesters.org/security)
- [Privacy](https://apptesters.org/ai/privacy.md)
- [Support](https://apptesters.org/ai/support.md)