Document Owner: CEO/CTO

Last Updated: October 21, 2025

Review Frequency: Annually

1. Purpose

This document describes Kino AI's internal vulnerability assessment program, which provides continuous evaluation of security posture through a combination of automated scanning, manual security reviews, and collaborative assessment with customer infrastructure teams.

2. Scope

Internal vulnerability assessments cover:

• Application code and business logic
• Software dependencies and libraries
• API endpoints and integrations
• Authentication and authorization mechanisms
• Data handling and storage
• Infrastructure configurations (GCP)
• Integration points with customer systems
• Development and production environments

3. Assessment Philosophy

As a lean, highly technical engineering team, Kino AI's vulnerability assessment program is:

Continuous, Not Periodic:

• Security assessment integrated into development workflow