Responsible Disclosure Policy

1. Reporting

If you find a vulnerability, please e-mail security@kataritech.com with the details and steps to reproduce it. We will acknowledge within 2 business days and keep you informed.

2. Rules

• Test only against accounts you own, and never access, change or delete other people’s data.
• Do not run denial of service tests, social engineering, or physical attacks.
• Give us reasonable time to fix the issue before telling anyone else.

3. Our commitment

We will not take legal action against people who follow this policy in good faith, and we will credit reporters who wish to be named once the issue is fixed.