Report a security issue ​

Send possible security vulnerabilities privately to info@takin.run. Reports in German and English are welcome. Cornelius Wichering, Takin's operator, receives and coordinates reports through this inbox. The same address handles general contact and privacy requests.

Scope ​

This reporting channel covers the Takin service, including its sign-in and authentication integration. If you suspect a problem in Takin's use of Rauthy, describe what you observed in Takin so the operator can coordinate follow-up.

What to include ​

• The affected page, component or operation; omit credentials from URLs.
• A short description of the issue and its possible impact.
• The smallest useful steps to reproduce it, with expected and observed results.
• Relevant version information, if known.

Include only the evidence needed to understand the issue. Do not send passwords, private keys, session tokens or unrelated personal data. If evidence contains sensitive information, describe it first so the operator can coordinate how to share it.

Private reporting and follow-up ​

Please report privately first so the operator can review the issue and coordinate remediation and any disclosure with you.

Use the same inbox for general support or questions about account access. The privacy notice explains how messages are processed. Machine-readable reporting information is published at takin.run/.well-known/security.txt.