Security Policy

Products and responsibility

Sitekick CMS is the WordPress website service available to customers. Sitekick Studio is a separate product whose availability is described on its product page. Security controls, account settings, integrations and hosting arrangements can differ between them. A Studio feature or safeguard is not automatically a feature of a CMS subscription.

Protect your credentials, email account, devices, domain registrar and external integrations. Give collaborators only the access they need, keep independent backups, and review changes before publication.

Our approach

We use HTTPS for the public marketing website and documentation. Studio includes account and project access checks, protected account sessions, bounded requests and review controls for publishing. CMS security also depends on its WordPress installation, installed plugins, hosting and administrator permissions. We review changes through build and release checks.

Send only the information necessary for a requested task. AI output and external content can be misleading; review proposed changes and consequential customer actions. A preview or successful homepage load does not verify every form, payment or booking workflow.

Report a vulnerability

Contact support@sitekick.ai with the affected product and URL, reproduction steps and the potential impact. Avoid including credentials or personal customer information. Test only accounts and resources you control, stop if another person's data becomes accessible, and do not disrupt availability. We may ask for further details through a suitable support channel.