> I run ownCloud, despite some reservations about its security. I'm not too concerned about the data in ownCloud itself (if it's private, then I encrypt it clie

> I run ownCloud, despite some reservations about its security. I'm not too concerned about the data in ownCloud itself (if it's private, then I encrypt it client-side, but most things I put in ownCloud are not very private). I'm more concerned about it being used as a launching point for an attack on my home server. As a kind of compromise, I'm running it in a VM. ownCloud does run a bug bounty program (https://hackerone.com/owncloud https://hackerone.com/owncloud) and the company supporting the project also employs internal security experts. You might also want to read https://statuscode.ch/2015/09/ownCloud-security-development-over-the-years/ https://statuscode.ch/2015/09/ownCloud-security-development-... which covers why comparing CVEs is not a reliably way to compare the security of products.