You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -49,7 +49,7 @@ NetBox runs as a web application atop the [Django](https://www.djangoproject.com
49
49
Python framework with a [PostgreSQL](https://www.postgresql.org/) database. For a
50
50
complete list of requirements, see `requirements.txt`. The code is available [on GitHub](https://github.com/netbox-community/netbox).
51
51
52
-
The complete documentation for NetBox can be found at [Read the Docs](https://netbox.readthedocs.io/en/stable/). A public demo instance is available at https://demo.netbox.dev.
52
+
The complete documentation for NetBox can be found at [docs.netbox.dev](https://docs.netbox.dev/). A public demo instance is available at https://demo.netbox.dev.
53
53
54
54
<divalign="center">
55
55
<h4>Thank you to our sponsors!</h4>
@@ -60,6 +60,8 @@ The complete documentation for NetBox can be found at [Read the Docs](https://ne
Per the terms of the Apache 2 license, NetBox is offered "as is" and without any guarantee or warranty pertaining to its operation. While every reasonable effort is made by its maintainers to ensure the product remains free of security vulnerabilities, users are ultimately responsible for conducting their own evaluations of each software release.
6
+
7
+
## Recommendations
8
+
9
+
Administrators are encouraged to adhere to industry best practices concerning the secure operation of software, such as:
10
+
11
+
* Do not expose your NetBox installation to the public Internet
12
+
* Do not permit multiple users to share an account
13
+
* Enforce minimum password complexity requirements for local accounts
14
+
* Prohibit access to your database from clients other than the NetBox application
15
+
* Keep your deployment updated to the most recent stable release
16
+
17
+
## Reporting a Suspected Vulnerability
18
+
19
+
If you believe you've uncovered a security vulnerability and wish to report it confidentially, you may do so via email. Please note that any reported vulnerabilities **MUST** meet all the following conditions:
20
+
21
+
* Affects the most recent stable release of NetBox, or a current beta release
22
+
* Affects a NetBox instance installed and configured per the official documentation
23
+
* Is reproducible following a prescribed set of instructions
24
+
25
+
Please note that we **DO NOT** accept reports generated by automated tooling which merely suggest that a file or file(s) _may_ be vulnerable under certain conditions, as these are most often innocuous.
26
+
27
+
If you believe that you've found a vulnerability which meets all of these conditions, please email a brief description of the suspected bug and instructions for reproduction to **[email protected]**. For any security concerns regarding NetBox deployed via Docker, please see the [netbox-docker](https://github.com/netbox-community/netbox-docker) project.
28
+
29
+
### Bug Bounties
30
+
31
+
As NetBox is provided as free open source software, we do not offer any monetary compensation for vulnerability or bug reports, however your contributions are greatly appreciated.
0 commit comments