Contact & SecOps Disclosure
1. Security Operations (SecOps) & Incident Response
Natrium Technologies Inc. maintains continuous Security Operations (SecOps) monitoring across our direct-MX mail relays, encrypted storage volumes, DNSSEC zones, perimeter firewall rules, and SIEM event streams.
For vulnerability disclosures, cryptographic audits, or urgent security incidents, contact our SecOps engineering desk directly:
Primary SecOps Desk:
security@natrium.shResponse SLA: Initial acknowledgment within 24 hours • Triage and verification within 72 hours • Urgent safety and critical vulnerabilities prioritized
2. Official PGP Public Key & Cryptographic Fingerprint
When transmitting sensitive vulnerability reports, exploit proofs-of-concept, or confidential legal correspondence to Natrium, please encrypt your message using our official SecOps PGP key:
0x462791CDD8E3BF50 • RSA 4096-bit • Published via RFC 9116 /.well-known/security.txt3. Coordinated Vulnerability Disclosure & Safe Harbor Policy
Natrium welcomes independent security researchers and cryptographic auditors. If you conduct good-faith security research in accordance with this policy, Natrium considers your testing authorized under the Computer Fraud and Abuse Act (CFAA) and Digital Millennium Copyright Act (DMCA) and will not initiate legal action against you:
- Scope & Good Faith: Test only against your own test accounts on
natrium.sh. Do not attempt to access other users' mailboxes, execute unauthorized exfiltration probes against production tenants, or execute volumetric DDoS / social engineering attacks. - Coordinated Disclosure Window: Provide a detailed technical write-up and reproduction steps to
security@natrium.shand allow a standard industry remediation window of ninety (90) days prior to any public disclosure (or thirty (30) days for accelerated remediation where mutually agreed).
4. Official Departmental Routing Directory
All official @natrium.sh administrative handles are cryptographically reserved at the database level so they can never be registered or spoofed by third parties:
| Department / Desk | Official Address | Scope of Inquiries | Target Response SLA |
|---|---|---|---|
| Security Operations (SecOps) | security@natrium.sh | Vulnerability disclosures, cryptographic reports, PGP reports | Within 24 Hours |
| Abuse & Safety Response | abuse@natrium.sh | Spam reports, phishing campaigns, AUP violations, CSAM escalation | Within 12 Hours |
| Legal & Privacy Compliance | legal@natrium.sh | Subpoenas, statutory inquiries, GDPR / CCPA requests, DMCA notices | 1–3 Business Days |
| Support & Accounts | support@natrium.sh | Plan upgrades, billing, custom domain DNS assistance, general help | Within 24 Hours |
5. Trust, Safety, Abuse & Legal Process Escalations
When reporting spam, phishing, or network abuse to abuse@natrium.sh, please include full RFC 5322 message headers (including Message-ID, Received chains, and DKIM-Signature fields) so our SecOps engineers can trace and block the offending source immediately.
6. RFC 9116 security.txt & Autonomous Agent Discovery Endpoints
Automated security scanners, compliance validators, and autonomous AI agents can inspect our canonical machine-readable discovery endpoints at any time:
- RFC 9116 Security Disclosure:
https://natrium.sh/.well-known/security.txt - Model Context Protocol (MCP):
https://natrium.sh/.well-known/mcp.json - A2A Agent Card (Linux Foundation):
https://natrium.sh/.well-known/agent-card.json - OpenAPI 3.1 Specification:
https://natrium.sh/.well-known/openapi.json - AI Documentation Index:
https://natrium.sh/llms.txt&https://natrium.sh/AGENTS.md
7. Verifying Official Natrium Communications
Anti-Phishing Notice: Natrium staff will never ask you for your account password, 6-digit TOTP code, or recovery challenge answers. All legitimate outbound messages from official @natrium.sh desks carry a valid 2048-bit RSA DKIM cryptographic signature (d=natrium.sh) and pass strict SPF/DMARC alignment.
8. Customer Support, Plan Upgrades & Custom Domains
For assistance with Pro or Enterprise plan upgrades, configuring custom domain MX/DKIM/SPF records, or general platform questions, email support@natrium.sh directly from your Natrium mailbox.