How to report
Email [email protected]. Kattia acknowledges reports within 2 business days.
Include:
A clear description of the issue.
Steps to reproduce it.
The impact you expect.
How to contact you.
What to report
Report issues that could affect Kattia's security, such as:
Ways to read another person's data.
Sign-in or two-factor bypasses.
Injection flaws.
Exposure of sensitive information.
Do not use this address for feature requests, general bugs or questions about how Kattia works. Contact support for those.
Report responsibly
Do not make the issue public before Kattia has had time to respond.
Do not go further than you need to show the issue.
Do not access data that is not yours.
How Kattia responds to incidents
Kattia monitors error rates and webhook failures continuously. If Kattia detects a security incident that affects your account, Kattia notifies you within 72 hours. The notice says what happened, what data was involved and what to do.
Security controls
The Security page on kattia.io lists Kattia's current controls, including encryption, authentication and safeguards on URL imports.