Security

Report a vulnerability

If you believe you have found a security issue in the BuildBaseKit website or a released BuildBaseKit product, report it privately to hello@buildbasekit.com.

What to include

• the affected product or URL
• the product version, where relevant
• clear reproduction steps
• the potential impact
• relevant non-sensitive logs or technical details

Please avoid

• destructive or disruptive testing
• accessing unrelated user data
• privacy-invasive testing
• public disclosure before a reasonable investigation period

Disclosure and rewards

Please allow reasonable time to investigate and address a report before public disclosure. No bug bounty or vulnerability reward program is currently offered.

Machine-readable contact

Automated tools and security researchers can also use the site’s security.txt file.