Skip to main content

Share a security concern

OmniH does not run a paid bug bounty and we do not invite outside testers to probe our systems. Even so, careful researchers play a real role in protecting the diagnostic workflows patients and clinicians rely on.

Send a report
Person reviewing security details on a phone beside a notebook and laptop
Desk with notebook diagrams, coffee, and laboratory sample tubes

How to disclose a finding

If you believe you have found a weakness in OmniH products, APIs, or infrastructure, please tell us privately so we can investigate and fix it before it puts anyone at risk.

Helpful reports usually include:

  • Where the issue appears and what harm it could cause if left unfixed
  • Clear reproduction steps, plus any proof-of-concept notes, screenshots, or short screen recordings that help us confirm the finding

Tell us what you found

Messages are routed to security@omnih.health. We try to confirm receipt quickly and will reach out if we need more context.

Walk us through the steps in order. Notes and proof-of-concept detail are welcome—never include patient PHI or live credentials.

Grateful for researchers who keep care safe

We aim to acknowledge reports promptly and share progress while we work through a fix. OmniH does not pay cash rewards for disclosures; your contribution still helps protect clinical data across our network.

Email security