Responsible Disclosure

We appreciate the work of security researchers and encourage responsible disclosure of vulnerabilities. If you believe you have found a security issue, please report it to us privately so we can investigate and remediate quickly.

How to Report

Email your report to security@clik.ai with clear reproduction steps and supporting evidence.

A concise description of the issue and its impact.
Steps to reproduce, including endpoints and parameters.
Screenshots, logs, or proof-of-concept where applicable.
Any suggested remediation or mitigation ideas.

Safe Harbor

We will not pursue legal action against researchers who follow these guidelines, act in good faith, and avoid privacy violations, data destruction, and service disruption.

Testing Guidelines

Do not access, modify, or delete user data.
Do not use automated scanners that impact availability.
Do not conduct social engineering or phishing attacks.
Do not publicly disclose the issue before resolution.

Response Expectations

We aim to acknowledge reports within 3 business days and will provide status updates as our investigation progresses.