Reliability and security
Live figures
- Uptime in the last 30 days
- 100%
- Status now
- All services are running
- Latest incidents
- No incidents in the last 14 days
- Last updated
- 9 Nov 2026, 00:58
How we protect your data
Servers in Saudi Arabia
Our servers are in Saudi Arabia.
Always encrypted
Your data is encrypted in transit and at rest.
Kept apart and on record
Each organization’s data is kept apart from all others, and every action is recorded with who took it.
Continuous backups
Continuous copies kept in a separate place, with fast recovery.
Report a security issue
How to report
The security reporting address is not set up on Rabt yet
Rabt does not have the settings or credentials it needs to use The security reporting address, so this action cannot run.
Send these details to Rabt support. The Rabt team must finish setting up The security reporting address before you can use it.
SYS-1001ref_e1b3817c94e0067ac77c46033af97fbdv1.28.3+737df0f
- What the issue is and what an attacker could do with it.
- The address, request or screen where it happens, and the steps to reproduce it.
- If an error screen appeared: its code, reference and release, exactly as shown.
- Your name or handle, if you would like us to credit you.
In scope
- rabt.systems and its subdomains: app, api, hooks, widget, ws, status.
- The public API, the MCP server and outbound webhooks.
- The web chat widget and the Rabt apps for phones and computers.
Rules for testing
- Test only with your own account and your own organization (the free trial is enough).
- Never read, change or keep other people's data; stop and report as soon as you reach any.
- No denial of service, load tests, spam, social engineering or physical access.
- Do not test the providers Rabt connects to (Meta, X, TikTok, Microsoft, Google, payment and SMS providers): report issues in their services to them.
- Keep the details private until the issue is fixed.
Good faith
Research that follows these rules is welcome. We read every report, keep you informed until the issue is fixed, and do not take action against good-faith research that respects these rules.
For tools
The same address is published in the standard security.txt file.