Security
Molvek OÜ (Estonia, registry code 17618773) · security@molvek.com
Last updated: 28 October 2026
Report a vulnerability
Report security vulnerabilities affecting molvek.com and its subdomains to security@molvek.com. We aim to respond within 5 business days. We will not pursue legal action against researchers conducting good-faith security research.
Security practices
Connection secrets and OAuth refresh tokens are encrypted with AES-256-GCM. We enforce tenant isolation. Security-critical changes undergo independent review and adversarial testing before release. Multi-factor authentication is enforced on Molvek's administrative accounts for infrastructure, source code, payments and email.