krupiq
Download

Security Policy

Vulnerability disclosure, PGP key, and security contact information for Krupiq

Updated

Security Policy

We take the security of Krupiq and our customers seriously. If you discover a security vulnerability, we appreciate your help in disclosing it responsibly.

Reporting a Vulnerability

Email: security@techpassport.com

PGP Key: Download PGP Key

Response Time: We aim to acknowledge all reports within 48 hours and provide a status update within 5 business days.

Scope

This policy applies to:

  • krupiq.com and all subdomains
  • portal.krupiq.com
  • API endpoints under api.krupiq.com
  • The Krupiq agent and portal applications
  • Cloudflare Worker infrastructure

Out of Scope

  • Social engineering attacks
  • Physical security issues
  • Denial of service (we’re on Cloudflare)
  • Issues in third-party services we don’t control

Safe Harbor

We authorize good-faith security research and will not pursue legal action for:

  • Testing that respects this policy
  • Not accessing or modifying user data
  • Not disrupting services
  • Reporting findings promptly

Recognition

We acknowledge researchers who follow responsible disclosure on our Acknowledgments page.

Contact

Last updated: September 20, 2026