Support
How to reach us
RiskAlign is pilot-stage and founder-supported. One channel, honest response targets, no ticketing theatre. Anything urgent or security-related has its own path below.
Security & incidents
Suspected vulnerability, credential exposure, data concern.
security@riskalign.app · see vulnerability disclosure policy
Severities & response targets
- S1 — Service down
Operator console unreachable, sign-in broken, or a security incident in progress.
Target · Acknowledgement within 4 business hours; founder paged within 1 hour where reachable.
- S2 — Major degradation
A core surface (risk register, controls, KRIs, audit trail) is partially unavailable or incorrect.
Target · Acknowledgement within 1 business day; fix or workaround inside 5 business days.
- S3 — Question or minor issue
How-to questions, cosmetic issues, low-impact bugs, feature requests.
Target · Acknowledgement within 3 business days; resolution scheduled into the next planning window.
Live platform status and recent incidents are on the status page. Full operational metrics (uptime, MTTR, open findings) are on the metrics page. To unsubscribe from RiskAlign emails, use the link in any message we send you or visit /unsubscribe.