Security Acknowledgements
Thanks to the researchers who report issues privately and give us time to fix them.
If you have found a security issue in Kickbacks.ai, please report it to security@kickbacks.ai. Our machine-readable contact details are published at /.well-known/security.txt.
Credited researchers
| Researcher | Reported | Category |
|---|---|---|
| Soham Jadhav | September 2026 | Authentication |
| Sunil Mehara | September 2026 | Session management |
| Nitin Kumawat | September 2026 | Session management |
| Pathan Aslam | September 2026 | Authentication |
| pradyumntiwarenexus | September 2026 | Authentication |
| Rishaan Anand | September 2026 | Session management |
| Prince Kumar | September 2026 | Authentication |
| Aayush Yadav | September 2026 | Session management |
| Karol Nieckarz (karollol) | June 2026 | Revenue integrity |
| Aayush Yadav | July 2026 | Business logic |
We add people to this page only with their permission. If you have reported something
to us and would like to be listed, or would prefer not to be, tell us at
security@kickbacks.ai.
What we list
Entries are deliberately brief. We publish a researcher's name, the month they reported, and a broad category. We do not publish reproduction steps, affected components, or anything else that would help someone repeat the issue.
- Being listed here is recognition, not a bounty.
- We won't publish details of an unresolved issue.
- You can ask to be removed at any time.