Contact: mailto:security@tik.tools
Contact: https://tik.tools/help
Expires: 2027-12-31T23:59:59.000Z
Encryption: https://tik.tools/.well-known/pgp-key.txt
Preferred-Languages: en
Canonical: https://tik.tools/.well-known/security.txt
Policy: https://tik.tools/terms#security-disclosure

# Responsible disclosure
# Report a vulnerability privately to security@tik.tools. We respond within
# 72 hours. We do not pursue legal action against good-faith research that
# stays within the scope below.
#
# In scope: tik.tools, api.tik.tools, cdn.tik.tools, server.tik.tools.
# Out of scope: DoS / volumetric attacks, social engineering of staff,
# physical attacks, third-party services we depend on (Stripe, Cloudflare,
# Directus, TikTok), reports that require physical access or compromised
# end-user credentials.