Responsible Disclosure Policy

At KRAXXSEC, security is our primary focus. If you believe you have discovered a vulnerability in our website or public infrastructure, we encourage you to report it to us responsibly.

REPORTING GUIDELINES

• Email details of your finding to kraxxsec@gmail.com.
• Include steps to reproduce, HTTP requests/responses, or proof-of-concept code where applicable.
• Do not access, modify, or destroy data belonging to KRAXXSEC or third parties.
• Do not execute Denial of Service (DoS/DDoS) or social engineering attacks against our staff.
• Allow us reasonable time to investigate and remediate the issue prior to public disclosure.

OUR COMMITMENT

We acknowledge receipt of valid vulnerability reports within 1 business day and work diligently to fix verified issues.