Report a security issue.

Last updated: October 2, 2026. Keeping candidate and customer data safe matters more to us than anything else we build. If you think you have found a vulnerability, we want to hear from you.

Email support@scrini.ai

TLS 1.3AES-256SSOAudit trail

How to report

Email support@scrini.ai with "Security" in the subject. Include what you found and where (URL, endpoint or feature), the steps to reproduce it with a proof of concept and the impact you think it has.

Please do not

Access, change or delete data that is not yours
Run tests that slow down or disrupt the service
Use social engineering, phishing or physical attacks
Share the issue publicly before we have fixed it

What you can expect from us

Step	Timing
We confirm we got your report	Promptly
We assess it and share next steps	Once we have triaged it
We fix it and let you know	As fast as severity requires

Scope

In scope: scrini.ai, app.scrini.ai and our public APIs
Out of scope: third-party services we use and reports from automated scanners without a working proof of concept

Safe harbor

If you make a good-faith effort to follow this policy, we will treat your research as authorized, we will not pursue or support legal action against you for it and we will work with you to understand and fix the issue. If a third party takes legal action over research that followed this policy, we will make it known that your research was authorized. Our security contact is also published in our security.txt file at /.well-known/security.txt.