Security

Responsible vulnerability disclosure.

We take Marlek's security and privacy seriously. If you have found a security issue, we appreciate you reporting it responsibly before disclosing it publicly.

How to report

Email [email protected] with a description of the issue and steps to reproduce it. We acknowledge receipt and work on a fix.

Scope

  • The Marlek app for iPhone and iPad.
  • The Marlek system keyboard.
  • This site: marlek.khassinx.com.

Out of scope

  • Social engineering, phishing, or physical attacks.
  • Automated scanner reports without demonstrable impact.
  • Third-party services not operated by KHASSINX LLC.

Safe harbor

We will not pursue legal action against anyone who researches in good faith, respects people's privacy, does not degrade the service, and gives us reasonable time to fix before disclosure. We credit researchers publicly on request.

Technical details: /.well-known/security.txt (RFC 9116).