Security

Responsible Disclosure

If you believe you’ve found a security vulnerability, please email us with details so we can investigate and remediate promptly.

• • Email: ds@ktl.ai
• • PGP (optional): Provide if needed; we can arrange encrypted exchange.
• • Please include steps to reproduce and potential impact.

Data & Infrastructure

• • KTL.AI is self-hosted. Your application data remains within your infrastructure.
• • Our website collects minimal analytics via Umami; no ads tracking.
• • Transport security via HTTPS. We regularly review dependencies and apply updates.

Out-of-Scope

• • Denial of Service (DoS), rate‑limiting tests
• • Social engineering or physical attacks
• • Findings without clear security impact