Encrypt vulnerability reports to the Noru security team with this key, and verify it before you do.
Last updated: March 12, 2026
Noru supports encrypted vulnerability communication. Import the public key from https://noru.tech/.well-known/pgp-key.asc and encrypt your report to it before emailing security@noru.tech.
Do not include sensitive personal data in a report unless it is strictly necessary to reproduce the issue.
Compare the fingerprint of the imported key with the one published above. If they differ, or the import fails, contact security@noru.tech and request the current fingerprint out-of-band before sharing sensitive details.
We rotate keys when operationally required and keep this page updated with current guidance.
