Security

Report a Security Vulnerability

This is a dedicated path for security researchers and customers reporting a potential vulnerability — it is not the same queue as general support and is reviewed by our security team directly.

Responsible disclosure guidelines

Only interact with accounts and data you own, or that you have explicit permission to test
Don't access, modify, or exfiltrate data beyond what's strictly needed to demonstrate the issue
Avoid actions that could degrade service for other users — no automated scanning or load-testing against production without prior written permission
Give us a reasonable window to investigate and remediate before any public disclosure

You can also email contact@kakr.ai with a subject starting "SECURITY:", or check /.well-known/security.txt. See our full reporting a security vulnerability article for details.