Security disclosure policy

1. Our commitment

Kaia Technologies, Inc. welcomes reports of security vulnerabilities in KAIA-OR and in the websites that present it. Reports from researchers, members and the public help us protect the people who use KAIA-OR.

This policy explains what is in scope, how to report an issue, and how we ask you to test.

2. Scope

This policy covers:

• the KAIA-OR web console and the KAIA-OR product site
• the Kaia Technologies, Inc. corporate site
• KAIA-OR software published by Kaia Technologies, Inc.

3. Out of scope

This policy does not cover:

• services and sites that Kaia Technologies, Inc. does not operate
• findings that need physical access to someone else's device
• social engineering of our staff or members
• denial-of-service and load testing

4. How to report

Write to the security mailbox shown on this page, in English. The same contact is published in the security.txt file of this site.

• the affected address, page or component
• a description of the issue and its possible impact
• the steps to reproduce it
• any proof-of-concept material needed to verify it, without other people's data

5. How we ask you to test

Please follow these rules while you research:

• Test only with accounts and data that you own or are allowed to use.
• Do not access, change or delete other people's data. If you reach it by accident, stop, do not keep it, and tell us.
• Do not degrade the service: no denial-of-service or load testing, and no high-volume automated scanning.
• Do not use social engineering, phishing or physical attempts against our staff, members or offices.
• Keep the details confidential until the issue is fixed, and give us a reasonable opportunity to fix it before any public disclosure.

6. After you report

We review each report and may contact you for more detail. We let you know when the issue you reported is resolved.

7. Good-faith research

If you make a good-faith effort to follow this policy, Kaia Technologies, Inc. considers your research authorized and will not pursue legal action against you for it. This policy does not authorize actions that break the law or harm others.

8. Other questions

For questions about your KAIA-OR account or the product, use KAIA-OR support. Support replies are in English.