Security

Studio FarOut designs, builds, and maintains websites, web apps, iOS apps, and the hosting and email infrastructure behind them, for our own products and for our clients. Karan owns secure code review, vulnerability remediation, and patching across every system we build or maintain.

If you’ve found a security issue in a website, app, or service that Studio FarOut builds or maintains, email karan@studiofarout.com with:

• What the issue is and where you found it
• Steps to reproduce it
• Any supporting detail, such as screenshots or requests

• We confirm receipt within five business days.
• We keep you updated while we work on the fix.
• If the issue sits in a client’s system, we coordinate the fix directly with that client.
• With your permission, we’re glad to credit you once the fix is live.

Please give us reasonable time to resolve an issue before sharing it publicly, avoid accessing or changing data that isn’t yours, and avoid anything that disrupts service for others. We welcome research carried out in good faith under these guidelines and will work with you to resolve what you find.