Skip to content
Get incident response
Kytheos

Vulnerability disclosure

Found a security issue? Tell us

We are a security company and hold ourselves to the standard we ask of clients. Good faith reports are welcome, and we will not take legal action against researchers who follow this policy.

How to report

Email kytheos@softtask.co with a description of the issue, the affected URL or product, steps to reproduce, and the impact you believe it has. Screenshots or a short video help.

In scope

  • kytheos.com and its subdomains
  • Kytheos products, including Guardian

Please do not

  • Access, change or delete data that is not yours
  • Run denial of service tests or high volume automated scans
  • Use social engineering or physical attacks against our staff or offices
  • Share the issue publicly before we have fixed it

What you can expect

  • We acknowledge your report within 3 working days
  • We keep you updated while we investigate and fix it
  • We credit you publicly once fixed, if you want us to

Machine readable contact details are published at /.well-known/security.txt.