Security Policy

Kiva Logic is a small team, focused on delivering value to our customers, not chasing down every hypothetical exploit that nobody is actually using.

That said, we take real security seriously. If you've discovered a genuine vulnerability, we appreciate a heads-up. We don't pay bounties, and we definitely don't respond to automated scans or script-kiddie extortion attempts.

Responsible Disclosure

If you find a vulnerability on *.kivalogic.com production systems, email us at security@kivalogic.com.

What to include:

• Clear explanation of the issue
• Steps to reproduce
• Proof of concept
• Impact assessment

What not to do:

• No automated vulnerability scanning
• No denial-of-service attempts
• No phishing, social engineering, or hitting third-party services
• No accessing, modifying, or deleting data that isn't yours

Legal

We won't come after you legally if you follow the rules above and act in good faith. If you're just trying to help, we appreciate it.

We maintain a security.txt file at /.well-known/security.txt.

Thanks for helping keep the web safer.