Security

Who is accountable

Matthew Jones, Founder and Head of Security, Maikai Group Inc.
security@maikai.dev

Reporting a vulnerability

Email security@maikai.dev. Tell us which product and version is affected, how to reproduce the issue, what you think the impact is, and how to reach you.

• We acknowledge every report within 3 business days.
• Within 10 business days we tell you whether we can reproduce it, how serious we think it is, and what we plan to do.
• We keep you informed of progress.
• We agree a disclosure date with you — 90 days from your report by default — and ask that you not publish before it.

We do not run a paid bug bounty.

How we build

For our security products:

• Every security-relevant change is independently reviewed before it is merged.
• Releases for macOS and Windows are signed.
• A threat model and a known-limits document are available to customers evaluating them.