Security Policy
At Kiework, the security of our users' data is our highest priority. We are committed to maintaining a secure environment and protecting the information entrusted to us.
1. Reporting Vulnerabilities
We welcome the contribution of security researchers who help us keep our platform safe. If you believe you have found a security vulnerability in Kiework, please report it to us as soon as possible.
Please send your reports to sujith [at] kiebot [dot] com.
2. Responsible Disclosure Policy
We ask that you follow these principles when reporting vulnerabilities:
- Give us a reasonable amount of time to resolve the issue before making it public.
- Avoid privacy violations, destruction of data, and interruption or degradation of our service.
- Do not use automated scanners that may cause service degradation.
- Only interact with accounts you own or with the explicit permission of the account holder.
3. Our Commitment
If you follow the responsible disclosure policy, we commit to:
- Acknowledge receipt of your report in a timely manner.
- Work with you to understand and resolve the issue.
- Acknowledge your contribution on our Security Hall of Fame (with your permission).
4. Out of Scope
The following types of reports are generally considered out of scope:
- Spam or Social Engineering techniques.
- Denial of Service (DoS) attacks.
- Issues related to third-party integrations (unless they reveal a direct vulnerability in Kiework).