Report a Vulnerability

Report privately

Email info@kapilatech.com with details of the suspected issue. Share only what is necessary to explain it and avoid including personal information, credentials or confidential data.

Report a Security Issue ↗

What to include

• The affected URL or component and when you noticed the issue.
• A clear description of the suspected vulnerability and potential impact.
• Minimal, non-destructive reproduction steps, using your own test data only.
• Redacted screenshots or other limited evidence, if useful.
• A contact address so we can ask follow-up questions.

Do not send other people’s personal information or copy sensitive records as proof. If you encounter such information accidentally, stop, do not access further records, and describe the situation without reproducing the data.

Scope and testing boundaries

This reporting channel covers systems under KapilaTech’s control. It does not authorise testing of client systems, hosting providers, email providers, third-party platforms or other systems we do not control.

This page is an invitation to report observations, not permission for intrusive testing or a grant of legal immunity. Obtain separate written authorisation before testing that would require it, and comply with applicable law.

• Do not bypass access controls, enter accounts without permission or extract data.
• Do not perform destructive testing, denial-of-service attacks or disruptive scanning.
• Do not use phishing, social engineering, malware or persistence mechanisms.
• Do not alter or delete information or disclose another person’s personal information.

Investigation and disclosure

Please give us a reasonable opportunity to investigate and address a report before public disclosure. Keep the report and any sensitive details private while we assess it. We may request clarification or provide an update, but cannot guarantee an acknowledgement, response or resolution timeline.

We do not operate a public bug bounty or monetary reward programme. Reporting does not create an entitlement to payment, recognition or other compensation.

Related information

See our Privacy Policy for information handling and our Terms of Service for website-use conditions. General business enquiries can be sent through the Contact page.