Responsible disclosure policy

If you have found a security issue in this website, please report it to security@kalkishield.com. Reports are acknowledged within 48 hours.

Please do not run automated scans that degrade availability, access data belonging to other people, or publish details before the issue has been fixed. Testing that stays within those bounds is welcome, and this site is deliberately in scope for it.

There is no bug bounty budget at present. What is offered is a prompt fix, a straight answer, and public credit if you want it.