Security & Responsible Disclosure
To report a suspected vulnerability, contact security@b2bm.net. For privacy-specific issues, use privacy@b2bm.net.
Responsible Disclosure
If you identify a security issue affecting Kaam & Khata or B2BM services, report it privately so the issue can be investigated and fixed before public disclosure.
What to Include
Include affected URLs, reproduction steps, impact, proof of concept details and any supporting logs or screenshots that help us validate the issue.
Scope
Good-faith testing against assets you are authorized to assess is welcome. Do not access customer data without authorization, disrupt service, use social engineering or exploit issues beyond what is necessary to demonstrate impact.
Response Process
We will acknowledge valid reports, investigate them, prioritize remediation based on risk and coordinate disclosure timing where appropriate.