Legal
Security Disclosure
Last updated: May 1, 2026
Reporting a vulnerability
Klaxar takes security seriously. If you believe you've discovered a vulnerability in our platform, please email security@klaxar.com with the details. We commit to acknowledging within 24 hours and providing a status update within 5 business days.
Safe harbor
Researchers acting in good faith — not exploiting vulnerabilities, not exfiltrating data, not impacting other customers — will not face legal action from Klaxar. We follow standard responsible-disclosure practices.
Out of scope
- Social engineering of Klaxar employees or customers
- Physical attacks against Klaxar offices or infrastructure
- Denial-of-service attacks
- Issues in third-party services not under Klaxar's control
For our full security posture, certifications, and controls, see /resources/security.