Security Policy
At Kryptsec, your security is our top priority. Our platform is built with cutting-edge technologies and follows industry best practices to safeguard your data and provide a secure learning experience.
Data Protection
- End-to-end encryption ensures data safety (TLS/SSL in transit).
- Data at rest is encrypted with AES-256 standards.
- Secure authentication with Google and Discord oAuth, using encrypted JSON Web Tokens (JWT).
- IP and agent data are collected and transparently displayed in your settings profile for accountability.
Vulnerability Management
- Regular security audits and penetration testing.
- Continuous monitoring for vulnerabilities and threat vectors.
- Future plans include a vulnerability disclosure program for community collaboration.
Authentication
- Secure login through Google and Discord oAuth ensures minimal data collection and enhanced account protection.
- Upcoming support for Kryptsec native signups with email and OTP-based passwordless authentication.
Incident Response
- Proactive incident response plan to address breaches swiftly.
- Notification to affected users within 24 hours of a confirmed incident.
- Comprehensive root cause analysis and mitigation steps shared with the community.
Badge Recognition Program
Kryptsec recognizes contributors who help improve our platform's security. Badges are awarded for reporting vulnerabilities based on severity:
Critical Finder
Awarded for reporting critical vulnerabilities such as remote code execution or authentication bypass.
High Priority Finder
Recognizes significant findings like sensitive data exposure or privilege escalation.
Contributor
Awarded for reporting helpful but lower-priority issues that improve the platform.
Reporting Security Vulnerabilities
If you discover a vulnerability or have a security-related concern, please contact us:
- General Security Questions: [email protected]
- Vulnerability Disclosures: [email protected]
Kryptsec is committed to maintaining the highest security standards and continuously improving our platform. Your trust is our priority.