Responsible disclosure

We take the security of our website and systems seriously. If you believe you have found a vulnerability, please tell us so we can fix it.

How to report

Email info@kanconsultinggroup.com with:

• a description of the issue and where it occurs
• the steps needed to reproduce it
• any proof-of-concept, screenshots or logs that help us understand it

Please do not include personal data belonging to others.

Please do

• report the issue as soon as possible after discovering it
• give us reasonable time to fix it before telling anyone else
• test only against your own accounts and data

Please do not

• access, change or delete data that is not yours
• run denial-of-service tests, spam or social engineering
• use automated scanners in a way that degrades the service

What we will do

We will acknowledge your report promptly, keep you updated on progress and let you know when the issue is resolved. We will not take legal action against researchers who act in good faith and follow this policy.

A machine-readable contact is published at /.well-known/security.txt.