What to include
Provide the affected URL or component, clear reproduction steps, observed impact and a safe way to contact you.
Responsible disclosure
Report a suspected vulnerability safely and with enough context to investigate.
Do not access more data than necessary, disrupt services, use social engineering or publish details before Kwalie can assess and remediate the issue.
Safe research
Use the minimum proof required. Do not alter data, establish persistence, run denial-of-service tests or test third-party accounts.
Our response
Kwalie will acknowledge a credible report, triage severity, coordinate updates and ask before crediting a researcher publicly.
Urgent exposure
If personal data or active exploitation may be involved, state that clearly in the subject and stop further testing.