Security & Responsible Disclosure

Security is our product and our practice. This page covers how we scan responsibly and how to report an issue in Vibe AI itself.

Our scanning principles

• Passive & non-invasive by default — we never attack, brute-force or exploit.
• Ownership-verified — we confirm the requester is tied to the target before any scan.
• Least data — we collect only what’s needed to deliver your report, stored isolated per client.
• IP transparency — deep scans run from a known, allowlistable IP so you stay in control.

Reporting a vulnerability in Vibe AI

If you believe you’ve found a security issue in Vibe AI (vibe-ai.cloud) or our systems, please tell us privately at [email protected] before any public disclosure. Include steps to reproduce and impact. We’ll acknowledge, investigate and keep you updated.

Please don’t run intrusive tests against our production systems without prior written permission — reach out and we’ll coordinate safe testing.

Safe harbour

We won’t pursue action against good-faith researchers who follow this policy, avoid privacy violations and data destruction, and give us reasonable time to remediate before disclosure.

Contact

[email protected] — Kno2gether Labs LTD.