August 2026 responsible disclosure across Crypton and Crypton BYOD Platform: SMS delivery webhooks, BYOD install reconnect, the self-hosted setup flow, and personal access token revocation. Thank you for reporting these privately and testing only on your own account and instance.