Security at Meridaxa Software

We design products to use the security controls of the platforms where they run and to request access appropriate to their functions.

CostPulse architecture

CostPulse is designed for Atlassian Forge and uses Forge-hosted runtime capabilities for its core operation. It is designed to respect Jira permission boundaries.

Vulnerability reporting

Send suspected vulnerabilities privately to security@meridaxasoftware.com. Include the affected product, reproducible steps where possible, and potential impact. Do not send credentials or secrets.

Coordinated disclosure

Please allow a reasonable period for investigation and remediation before public disclosure. We will make a good-faith effort to assess actionable reports.