Vulnerability Disclosure Policy
Last updated: 2026-01-26
Report vulnerabilities through GitHub's private vulnerability reporting on the AKIOS repository (https://github.com/akios-ai/akios/security/advisories/new). If the form is unavailable, write to hello@akios.ai. Reports are handled on a best-effort basis, with no guaranteed response time.
Please include: component/URL, reproduction steps, impact, logs or PoC, and secure contact method.
Our Commitments
- Confidentiality; disclosure timeline coordination.
- Good faith remediation effort and status updates.
Safe Harbor
If you test and report in good faith without exploiting data or disrupting service, we will not pursue legal action.
Out of Scope
- Physical attacks, social engineering, spam.
- DoS by massive or automated traffic.
Thank you for contributing to AKIOS user security.