Security and Abuse

If you believe you have found a security vulnerability in crewkit, email security@crewkit.io. Please include:

• The affected URL, endpoint, or CLI command
• Steps to reproduce, and what an attacker could achieve
• Any proof-of-concept code, requests, or screenshots
• How you would like to be credited, if at all

We acknowledge reports promptly and keep you informed while we investigate and fix the issue. Please give us a reasonable time to fix it before disclosing it publicly, and do not access, modify, or delete data that is not yours while testing.

To report phishing, malware, impersonation, or other abusive content hosted on crewkit.io or crewkitusercontent.com, email security@crewkit.io with the full URL and a short description of the problem.

crewkitusercontent.com hosts content created by crewkit users and by AI models working on their behalf. It is kept on a separate domain, isolated from crewkit.io. Content on it is not written or endorsed by crewkit.

This policy covers:

• crewkit.io and all of its subdomains
• crewkitusercontent.com and all of its subdomains

We read reports in English and French.