Reporting a vulnerability
Email support@construktr.ai. Tell us what the problem is, the steps that make it happen, and any proof you have. Please tell us by email, not in a public post. That way we can fix a real problem before anyone else knows about it.
We will reply to say we got your report. We will look into it, and work with you to confirm and fix any real security hole. We do not pay rewards for reports at this time.
What we ask
- Give us fair time to look into and fix a problem before you share it publicly.
- Do not open, change or delete data that is not yours, past what you need to show the problem.
- Do not run automated scans or load tests on the live site without asking us first.
- Act in good faith. Do not invade anyone's privacy, take the service down, or slow it for other users.
Good-faith security research done under this policy is allowed. We will not take legal action against a researcher who follows it.
Machine-readable contact
This policy is also at /.well-known/security.txt, in the standard file format (RFC 9116) that security tools look for.
For anything else, like account or billing questions, use our support page.