allocait.app and api.allocait.app, and on an Allocait account that you own.
Safe harbor. If you act in good faith and follow this policy, Kangaroo Labs LLC (doing business as RidgeXAI) will not start legal action against you for the research, and will not treat it as a breach of the Terms of Service. This policy does not speak for anyone else, such as our hosting providers or other people whose accounts you reach. It does not authorize anything that breaks the law.
Vulnerability disclosure
What to do:- Test only your own account. Do not access, change or delete another person’s account or data. If you reach another person’s data by accident, stop, don’t keep or share it, and tell us.
- Stay small. Use the least you need to show the problem. Don’t run attacks that slow or stop the service, such as denial-of-service or high-volume scanning. Don’t use social engineering, phishing or physical access against us or anyone else.
- Keep it private until it’s fixed. Give us a reasonable time to fix the problem before you share details. Don’t publish personal data you reached.
- Stay in scope. Third-party services we use (for example our hosting, payment and market data providers) have their own programs. Report problems in them to the provider.