Security and responsible disclosure

Koi security problem mili? Pehle humein batao — hum 5 working days me jawab dete hain.

Report privately

If you find a security weakness in filekb.com — for example a way to make file data leave the browser, a hole in the admin panel or a misconfiguration — please tell us before telling anyone else. E-mail hello@filekb.com with the page address, steps to reproduce and, if you like, a name to credit. Machine-readable details: /.well-known/security.txt.

What we promise

• We acknowledge reports within 5 working days and aim to fix confirmed issues within 30 days, telling you when it is live.
• We do not pursue legal action against researchers who act in good faith: no data exfiltration beyond what proves the issue, no denial of service, no access to other people's data, and no public disclosure before the fix.
• We do not run a paid bounty programme, but we credit reporters here if they wish.

Scope

In scope: filekb.com, www.filekb.com, the /admin/ panel and the Firebase project behind it. Out of scope: Google-operated services (Analytics, AdSense, Firebase platform) and the Hostinger infrastructure — report those to the respective vendors.