Safeguards
The service uses encrypted transport, restrictive browser security headers, input validation, request rate limits, protected administrator routes, multi-factor administrator authentication, role-based authorization, audit records, and allowlisted affiliate destinations. Administrative access fails closed when required secrets are unavailable.
Responsible reporting
Email hello@kickpriceworld.com with “Security report” in the subject. Include the affected URL, observed behavior, reproduction steps, impact, and a safe way to contact you. Do not access data that is not yours, disrupt availability, use social engineering, or publish an unresolved issue before we have a reasonable opportunity to investigate.
Sensitive information
Never send passwords, private keys, API tokens, full payment data, or personal records through the contact form. Deal Nest Inc. does not offer a public bug bounty unless announced in writing.
Scope
This page describes operational safeguards, not a guarantee that every threat can be prevented. Report urgent issues promptly so they can be triaged.