# Kit Documentation

> Kit covers hiring, vulnerability disclosure, security training, performance reviews, outreach, and compensation research. This index lists every available documentation page.

Connect an agent to Kit: https://startupkit.app/agent-setup/prompt.md. Once connected, `search_docs` answers questions about Kit.

## Getting Started

- [Introduction](https://startupkit.app/docs/introduction.md): Choose the Kit product and guide that match the work you need to do.
- [Quick Start](https://startupkit.app/docs/quick-start.md): Set up your team, choose a product workflow, test it, and go live.
- [Screen Sharing](https://startupkit.app/docs/screen-sharing.md): Hide personal information while presenting Kit, and reveal individual items when needed.

## Managing Jobs

- [Hiring Overview](https://startupkit.app/docs/hiring-overview.md): What Kit's Hiring module is, who it's for, and how a role moves from job posting to offer.
- [Creating a Job Posting](https://startupkit.app/docs/creating-a-job-posting.md): How to create, configure, publish, and manage job postings, from draft to close.
- [Managing Your Pipeline](https://startupkit.app/docs/managing-your-pipeline.md): How candidates flow through stages, how to advance or reject them, how auto-advancement works, and what happens when a review needs a decision.
- [Candidate Payouts](https://startupkit.app/docs/candidate-payouts.md): How to configure stage-level compensation, review candidate tax forms, and process payout requests.
- [Candidate Data Fields](https://startupkit.app/docs/candidate-data-fields.md): How to define custom data fields on job postings to capture structured candidate information with optional AI extraction and privacy controls.
- [AI Extraction for Candidate Data](https://startupkit.app/docs/ai-extraction.md): How AI automatically extracts candidate data field values from resumes, form responses, and questionnaire answers.
- [AI Agent and MCP Tools](https://startupkit.app/docs/hiring-ai-agent-mcp.md): Run your pipeline from Kit's in-app AI assistant or any external MCP client. Triage applications, work your review queue, move candidates, and draft candidate replies.
- [Creating a Job Posting with AI](https://startupkit.app/docs/creating-a-job-posting-with-ai.md): Have Claude, or any AI assistant, draft the posting, the salary band, and the hiring stages. You publish it.

## Career Portal

- [Setting Up Your Career Portal](https://startupkit.app/docs/setting-up-your-career-portal.md): How to configure, brand, and launch your public career page, including custom domains, logos, and embed options.
- [The Candidate Experience](https://startupkit.app/docs/the-candidate-experience.md): What candidates see when they apply, from the public job page through the candidate portal and stage submissions.
- [Embedding Your Career Portal](https://startupkit.app/docs/embedding-your-career-portal.md): How to embed your career portal on your company website using an iframe, including customization options and API access.
- [Multi-Language Support](https://startupkit.app/docs/multi-language-support.md): How to enable multiple languages on your career portal so candidates can browse in their preferred language.
- [Google Jobs and SEO](https://startupkit.app/docs/google-jobs-and-seo.md): How Kit exposes structured data and sitemaps, sends job-update notifications, and handles indexing requirements for custom domains.
- [Public Jobs API](https://startupkit.app/docs/public-jobs-api.md): Build your own job site (e.g. with Next.js on Vercel) on top of your Kit hiring pipeline. List published roles and receive applications through a public REST API, an official TypeScript SDK, and a one-click Next.js template.
- [Posting Jobs to Jooble](https://startupkit.app/docs/posting-jobs-to-jooble.md): How to submit your automatically updated Kit job feed to Jooble.
- [Publish Jobs to Talent.com](https://startupkit.app/docs/publishing-jobs-to-talent.md): Prepare eligible jobs, share your tenant-specific Talent.com XML feed, and understand what the feed does and does not publish.
- [Publish Jobs to No Fluff Jobs](https://startupkit.app/docs/publishing-jobs-to-no-fluff-jobs.md): Prepare an eligible No Fluff Jobs XML feed, narrow it with URL filters, and complete sandbox onboarding without confusing feed inclusion with publication.

## Working with Candidates

- [Candidate Profiles](https://startupkit.app/docs/candidate-profiles.md): How to view, search, and manage candidate information across all their applications.
- [Reviewing Applications](https://startupkit.app/docs/reviewing-applications.md): How to screen incoming applications, review candidate submissions, and take action on applications.
- [Managing Offers](https://startupkit.app/docs/managing-offers.md): Extend, revise, and track offers through the full lifecycle, from draft to candidate response to final decision.
- [Resume Extraction & Search](https://startupkit.app/docs/resume-extraction.md): How Kit automatically extracts and indexes resume data for smarter candidate search
- [Talent Pool](https://startupkit.app/docs/talent-pool.md): How to build and search a pool of interested candidates before you have open roles.
- [Importing CVs in Bulk](https://startupkit.app/docs/bulk-cv-import.md): Upload PDF or Word CVs into a job posting or your talent pool, review the parsed details, resolve duplicates, and record your right to hold the files before creating records.
- [Sharing a Candidate CV](https://startupkit.app/docs/sharing-a-candidate-cv.md): Share a candidate's resume outside Kit through an expiring, email-verified link, so every download is attributable, and you can limit downloads to approved company domains.
- [Seen By on Applications](https://startupkit.app/docs/seen-by-on-applications.md): See which teammates opened an application, and optionally let the candidate know their application was opened, with a date and nothing more.
- [Recommended Credentials](https://startupkit.app/docs/recommended-credentials.md): Flag a credential you value on a job posting. Candidates get one optional email with free courses and can share evidence they already hold it. Kit never scores, ranks, or filters on it.
- [Asking Candidates to Clarify](https://startupkit.app/docs/clarify-candidate-insights.md): Ask a candidate to confirm or correct specific AI-extracted insight fields in one email, and write their own answer back into the field with candidate provenance.
- [Candidate Stall Nudges](https://startupkit.app/docs/candidate-stall-nudges.md): How Kit reminds a candidate who has gone quiet, and gives them an easy way to withdraw instead.
- [Screening Calls](https://startupkit.app/docs/screening-calls.md): Connect Twilio, call candidates from their applications, record outcomes, and review recordings and AI summaries.
- [Running Reference Checks](https://startupkit.app/docs/running-reference-checks.md): Collect consented referee nominations, send requests, track responses, and review the result.
- [Krisp Meeting Notes](https://startupkit.app/docs/krisp-meeting-notes.md): Connect a personal Krisp key, choose meeting notes or a transcript, and attach an encrypted snapshot to a candidate application.

## Team Collaboration

- [Inviting Your Team](https://startupkit.app/docs/inviting-your-team.md): Invite someone to one job or the wider account, explain their access, and manage pending invitations.
- [Reviews and Feedback](https://startupkit.app/docs/reviews-and-feedback.md): How team reviews work, from blind voting and scoring criteria to automatic advancement and resolving split decisions.
- [Slack Permission Levels](https://startupkit.app/docs/slack-permission-levels.md): Choose how much access Kit's Slack integration gets, from notifications-only posting to full candidate channel collaboration.
- [Slack Candidate Channels](https://startupkit.app/docs/slack-candidate-channels.md): How Kit automatically creates private Slack channels for each candidate so your team can collaborate in real time.
- [Holiday Mode](https://startupkit.app/docs/holiday-mode.md): Pause email notifications while you're away without losing track of what happens. Your team stays informed and candidates keep moving.
- [Share Ideas](https://startupkit.app/docs/idea-box.md): Submit improvement ideas and feature requests from anywhere in the app.
- [Personal Slack Notifications](https://startupkit.app/docs/personal-slack-notifications.md): How Kit sends you a direct Slack message when something needs your action, and how to pause, resume, or control these DMs.
- [Using @KitBot in Slack](https://startupkit.app/docs/using-kitbot-in-slack.md): How to mention Kit's @KitBot assistant in Slack, which channel answers what, and how it routes hiring vs. security questions.
- [Anti-Stall Reminders](https://startupkit.app/docs/anti-stall-reminders.md): How Kit nudges whoever owes the next hiring action so candidates never get stuck waiting.
- [Slack Message Language](https://startupkit.app/docs/slack-message-language.md): How Kit picks the language of a Slack message. One language your account chooses for shared channels, each person's own language for direct messages.
- [Team Access Control](https://startupkit.app/docs/team-access-control.md): Give each team member the right level of access to Hiring, Security, Outreach, Training, and Performance, and audit or revoke it when they leave.
- [Team Roles](https://startupkit.app/docs/team-roles.md): Set up a new team member in one click. Pick a predefined role like Recruiter, Finance, or Security Analyst, then fine-tune their access if needed.
- [Item-Level Access](https://startupkit.app/docs/per-item-access-grants.md): Restrict a single security report or outreach campaign to selected teammates, then grant teammates a Member or Lead role on just that item.
- [Your Daily Digest](https://startupkit.app/docs/daily-digest.md): One email each morning with everything waiting on you across hiring, security reports, and outreach, and the rules that keep it quiet when there's nothing to say.
- [Contextual Reminders](https://startupkit.app/docs/contextual-reminders.md): Set concise team reminders from a candidate or security report, use AI to draft the wording, time, and people, and choose in-app or email delivery.

## Hiring Guides

- [Writing Effective Job Descriptions](https://startupkit.app/docs/writing-effective-job-descriptions.md): A practical guide to writing job descriptions that attract qualified, diverse candidates.
- [Process Template Configuration](https://startupkit.app/docs/process-template-configuration.md): Complete reference for configuring hiring process templates with YAML. Stage types, config options, reviewers, and examples.
- [Building Ideal Candidate Profiles](https://startupkit.app/docs/building-ideal-candidate-profiles.md): How to define who succeeds in a role before you start interviewing, using outcomes, competencies, and scorecards to hire fairly and consistently.
- [Hiring Playbooks](https://startupkit.app/docs/hiring-playbooks.md): A team-only library of the hiring material you reuse. Documents and links, tagged so Kit surfaces them during stage setup and AI agents can read them.

## Scheduling & Interviews

- [Scheduling Overview](https://startupkit.app/docs/scheduling-overview.md): Built-in interview scheduling with personal availability, calendar integration, and team coordination, with no external booking tool required.
- [Managing Your Availability](https://startupkit.app/docs/managing-your-availability.md): Define your interview availability with weekly hours, date overrides, meeting limits, buffers, and scheduling windows.
- [Calendar Integration](https://startupkit.app/docs/calendar-integration.md): Connect Google Calendar to prevent double-booking, detect scheduling conflicts automatically, and optionally put booked interviews straight onto each interviewer's own calendar.
- [Interview Scheduling](https://startupkit.app/docs/interview-scheduling.md): Configure interview stages, assign interviewers, manage bookings, and handle cancellations and reschedules.
- [Calendar Feeds (ICS)](https://startupkit.app/docs/calendar-feeds.md): Subscribe to any calendar via ICS link without granting OAuth access. Works with Google Calendar, Outlook, Apple Calendar, and more.
- [Proactive Process Notifications](https://startupkit.app/docs/proactive-process-notifications.md): Kit automatically detects scheduling problems and notifies your team before candidates are impacted, then re-notifies candidates when issues are resolved.
- [Calendly External Scheduling](https://startupkit.app/docs/calendly-external-scheduling.md): Let candidates self-schedule live interviews on your Calendly event types, an optional, per-stage alternative to Kit's built-in scheduling.

## Compensation Research

- [Compensation Research Overview](https://startupkit.app/docs/compensation-research-overview.md): What Compensation Research is, who it's for, and what's included.
- [Setting Up Compensation Research](https://startupkit.app/docs/compensation-research-setup.md): Activate Compensation Research and configure which roles and regions to track.
- [Dashboard & Analytics](https://startupkit.app/docs/compensation-research-dashboard.md): Understand the Compensation Research dashboard. Filters, charts, role drill-downs, multi-currency, and board requests.
- [AI-Powered Compensation Insights](https://startupkit.app/docs/compensation-research-ai-insights.md): Use natural language to query salary benchmarks, compare roles, and explore market trends with Kit's AI assistant.

## Integrations

- [Integrations Overview](https://startupkit.app/docs/integrations-overview.md): Choose, connect, test, and safely remove the systems Kit uses with your products.
- [Connecting AI Assistants](https://startupkit.app/docs/connecting-ai-assistants.md): Connect Claude, Claude Code, Codex CLI, OpenCode, or any other MCP client to manage your hiring workflows with AI.
- [MCP Tools Reference](https://startupkit.app/docs/mcp-tools-reference.md): Catalog of every MCP tool Kit exposes, with its purpose, inputs, results, and permission boundary.
- [Webhooks Overview](https://startupkit.app/docs/webhooks-overview.md): Send real-time notifications to external systems when hiring events happen.
- [Webhook Events Reference](https://startupkit.app/docs/webhook-events-reference.md): Payload shapes, headers, and field definitions for every webhook event.
- [Webhook Security & Delivery](https://startupkit.app/docs/webhook-security-and-delivery.md): Verify webhook signatures, understand retry behavior, and troubleshoot delivery issues.
- [API Reference](https://startupkit.app/docs/api-reference.md): Authenticate and query the Hiring API for job postings, candidates, and applications.
- [Knowledge Base](https://startupkit.app/docs/knowledge-base.md): How to create knowledge entries that give Kit's outreach AI agent company context for better prospect research and email drafting.
- [GitHub Template Repository Setup](https://startupkit.app/docs/github-template-repository-setup.md): How to configure a GitHub template repository for code assignment stages, and how reviewers get access to candidate repositories.
- [Startupkit Email](https://startupkit.app/docs/startupkit-email.md): Receive inbound emails on your own domain using Startupkit's managed mail service. Add a domain, point an MX record, and you're done.
- [Posting Jobs to OLX.pl](https://startupkit.app/docs/olx-job-distribution.md): Connect OLX.pl once, then post any opening to Poland's largest marketplace with an AI-assisted review, kept in sync as the job changes.
- [Job Board Partner Integration](https://startupkit.app/docs/job-board-partner-integration.md): A practical starting point for connecting a job board to Kit using the partner's existing API, feed, and application flow.
- [Posting Jobs to Just Join IT and RocketJobs](https://startupkit.app/docs/posting-jobs-to-just-join-it-and-rocketjobs.md): Connect the shared employer portal, map each job board separately, and confirm paid publications from Kit.
- [AI Providers and Spend Controls](https://startupkit.app/docs/ai-providers-and-spend-controls.md): Choose where Kit sends in-app AI work, manage provider keys and models, and cap account-key spend.
- [Candidate Calls on iPhone](https://startupkit.app/docs/candidate-calls-on-iphone.md): Add a private, read-only candidate address book to iPhone Contacts.
- [Connect AI Agent Harnesses to Kit](https://startupkit.app/docs/hermes-pi-openclaw.md): Connect Claude Code, Codex, Grok Bot, Grok Build, Hermes, Pi, OpenClaw and other agents through OAuth. Verify the account and run a bounded task.

## Account & Compliance

- [Exporting Your Account Data](https://startupkit.app/docs/data-export.md): How to request, download, and understand a full export of your account data for compliance or portability, including a complete breakdown of VDP/CSIRT data categories.
- [Custom Domains](https://startupkit.app/docs/custom-domains.md): Replace your default Kit URLs with your own branded domain for your admin dashboard, career portal, or security portal.
- [Candidate Privacy & Consent](https://startupkit.app/docs/candidate-privacy-and-consent.md): How Kit handles candidate data consent on job application and talent pool forms, and how to customize the consent language for your organization.
- [Billing & Add-ons](https://startupkit.app/docs/billing-and-addons.md): What the Kit plan includes, how add-ons are billed, and what happens when you remove one.
- [Email & Notification Preferences](https://startupkit.app/docs/email-preferences.md): How Kit notifies you in-app, by email, Slack, and SMS, and how to control what you receive.
- [Breach Monitoring](https://startupkit.app/docs/breach-monitoring.md): Kit checks your team's login emails and any extra addresses you choose to monitor against the Have I Been Pwned breach database every day and alerts you when one turns up in a breach recently added to the database.
- [SSO & Directory Provisioning](https://startupkit.app/docs/single-sign-on-and-provisioning.md): Set up SAML single sign-on and automatic user provisioning/deprovisioning from Google Workspace so your team's access stays in lockstep with your directory.
- [Sign-in Security](https://startupkit.app/docs/sign-in-security.md): Review your recent sign-ins, spot the ones you don't recognize, and manage the trusted browsers that skip two-factor authentication.
- [Passkeys](https://startupkit.app/docs/passkeys.md): Add a passkey to your Kit account, understand what happens when an account requires one, and recover if you lose the device you set it up on.
- [Requiring Passkeys](https://startupkit.app/docs/requiring-passkeys.md): Require every member to hold a passkey before they can open your account, plus who's exempt, what members see, and how to recover someone who lost theirs.

## Vulnerability Disclosure

- [Vulnerability Disclosure Overview](https://startupkit.app/docs/vulnerability-disclosure-overview.md): What Kit's VDP module is, who it's for, and what's included.
- [Configuring Your Program](https://startupkit.app/docs/configuring-your-program.md): Configure all eleven VDP settings areas, including scope, routing, response targets, payouts, intake, and program email.
- [Triaging Reports](https://startupkit.app/docs/triaging-reports.md): How to use the Kanban triage board, read SLA indicators, assess severity, and resolve or dismiss reports.
- [Communicating with Researchers](https://startupkit.app/docs/communicating-with-researchers.md): How to use message threads, use reply templates in the composer, configure Slack notifications, and handle escalations.
- [The Researcher Portal](https://startupkit.app/docs/the-researcher-portal.md): How researchers submit reports, track status, appeal decisions, and set up payout info through the secure portal.
- [Bounties and Payouts](https://startupkit.app/docs/bounties-and-payouts.md): How to approve bounties, manage the disbursement pipeline, read and re-queue a failed payout, handle tax documents, and use the immutable financial ledger for SOC 2 evidence.
- [security.txt Setup](https://startupkit.app/docs/security-txt-setup.md): How to configure, preview, and serve your RFC 9116-compliant security.txt file, the primary discovery mechanism for ethical hackers.
- [AI Integration](https://startupkit.app/docs/ai-integration-vdp.md): How to use the built-in AI assistant and external MCP tools to automate VDP triage, severity assessment, and researcher communication.
- [Metrics and Exports](https://startupkit.app/docs/metrics-and-exports.md): How to read your VDP metrics dashboard, manage researcher karma, publish the Hall of Fame, and generate SOC 2 evidence exports.
- [On-Call Rotation](https://startupkit.app/docs/on-call-rotation.md): How to set up on-call shifts and scheduled rotation so there is always someone responsible for triaging vulnerability reports.
- [PagerDuty Integration](https://startupkit.app/docs/pagerduty-integration.md): Connect PagerDuty to receive VDP alerts, sync on-call schedules, and track incident status in Kit.
- [Vanta Integration](https://startupkit.app/docs/vanta-integration.md): Connect Vanta to turn your triaged VDP vulnerabilities into live SOC 2 and ISO 27001 compliance evidence automatically.
- [PDF Sanitizer](https://startupkit.app/docs/pdf-sanitizer.md): Upload an untrusted PDF to create a new copy from page images, without JavaScript, embedded files, or document actions.
- [Set up a VDP with an AI agent](https://startupkit.app/docs/set-up-vdp-with-ai-agent.md): Go from zero to a live vulnerability disclosure program by chatting with an AI agent. Create, configure, and activate the VDP through MCP tools, with human confirmation on the steps that matter.
- [Sharing Reports With Peers](https://startupkit.app/docs/sharing-reports-with-peers.md): Share a single vulnerability report with an engineer outside your team via a secure, email-gated, expiring link, without exposing the researcher, bounty, or internal notes.
- [Code-Aware AI Triage](https://startupkit.app/docs/code-aware-ai-triage.md): Run your own AI security agent over every incoming VDP report and your own codebase in your CI, on your model, with restricted network access. Review the advisory result in Kit before applying it.
- [Set up the airgapped triage agent](https://startupkit.app/docs/set-up-triage-agent.md): Connect your forked VDP triage repo to Kit through a guided stepper. Fork the example repo, wire the pipeline trigger, and verify with a real round-trip.
- [How the airgap works](https://startupkit.app/docs/triage-agent-airgap.md): The security model behind Code-Aware AI Triage: why the network boundary lives outside the agent, how to airgap a GitLab runner, and how to restrict where an agent can send data from an attacker-submitted report.
- [Customizing the triage prompt and model](https://startupkit.app/docs/customizing-triage-agent.md): Point the VDP triage agent at your own model (DeepSeek, local vLLM, Anthropic, OpenRouter), tune the security-research prompt with prompt-injection hygiene, and shape the output schema, all in your forked repo.
- [Postmortems and Root-Cause Analysis](https://startupkit.app/docs/postmortems-and-rca.md): Attach a private, structured root-cause analysis to any resolved report. It is your internal audit record, downloadable as a per-report PDF dossier.
- [Routing Reports to Teams](https://startupkit.app/docs/routing-reports-to-teams.md): Build a component catalog of product areas so incoming vulnerability reports are suggested to, and claimed by, the team that owns them.
- [Triaging Your VDP Queue with Claude](https://startupkit.app/docs/ai-native-vdp-triage.md): Connect Claude to Kit's MCP server and work the vulnerability-disclosure queue with ready-made prompts that orchestrate scope, severity, duplicate, bounty, and postmortem workflows.
- [IP Investigation](https://startupkit.app/docs/ip-investigation.md): Look up any IP address and get an at-a-glance profile (classification, ownership/abuse contact, routing/ASN, reverse DNS, host exposure, cloud attribution, reputation, and malware/C2 threat intel) pulled live from public sources.
- [Email Checker](https://startupkit.app/docs/email-checker.md): Screen any email address to decide whether it's disposable or temporary (a throwaway inbox like mailinator or 10minutemail), combining a daily-refreshed blocklist with a mail-server fingerprint, before you trust a signup or a report.
- [Seen By on Reports](https://startupkit.app/docs/seen-by-on-reports.md): See which teammates have viewed a report. A live avatar row on every report, with an account-wide toggle in program settings.
- [Stalled Report Nudges](https://startupkit.app/docs/stalled-report-nudges.md): How Kit reminds the owner of a vulnerability report that has gone quiet, and escalates to your program admins if it stays quiet.
- [Jira Integration](https://startupkit.app/docs/jira-integration.md): Push validated vulnerability reports to Jira as engineering tickets with the description and reproduction steps excluded by default.
- [Submission Limits and Spam Blocks](https://startupkit.app/docs/submission-limits-and-spam-blocks.md): Every reason Kit can turn a vulnerability report away (bot checks, per-IP throttling, burst blocks, and invite-only portals), plus how to read a spam record and release someone who was caught by mistake.
- [Linear Integration](https://startupkit.app/docs/linear-integration.md): Push validated vulnerability reports to Linear as issues, and read remediation status back, with the description and reproduction steps excluded by default.
- [Slack Report Threads](https://startupkit.app/docs/slack-report-threads.md): How one vulnerability report maps to one Slack card and one thread. What the card shows, what posts a reply, which channel it lands in, and why restricted reports never appear.
- [Bounty Proposals and Team Voting](https://startupkit.app/docs/bounty-proposals.md): Put an amount on the table before it becomes money. How proposals, blind or live voting, counter-amounts and amendments work, and why the researcher never sees any of it.
- [Takedown Notices](https://startupkit.app/docs/takedown-notices.md): Receive and act on third-party abuse reports (phishing and brand-impersonation complaints from CERT teams and abuse desks) alongside your vulnerability disclosure program.
- [The Low Signal Marker](https://startupkit.app/docs/low-signal-researchers.md): A staff-only hint next to reports from researchers whose acceptance ratio on your program is below 75%: how the acceptance ratio is measured, and why it isn't karma.
- [Prompt-Injection Scan and Submission Types](https://startupkit.app/docs/prompt-injection-scan.md): Every report is scanned for text aimed at AI tools and labelled with what it was submitted for: what the verdicts and labels mean, where they appear, and what they never do.

## Outreach

- [Outreach Overview](https://startupkit.app/docs/outreach-overview.md): What Kit's Outreach module is, how AI-powered cold email works, and what's included in the addon.
- [Setting Up Email Delivery](https://startupkit.app/docs/outreach-email-delivery.md): Configure SMTP and IMAP for sending outreach emails and detecting prospect replies.
- [Creating Campaigns](https://startupkit.app/docs/outreach-campaigns.md): Create campaigns from templates or scratch, configure sequences and AI directives, and manage the campaign lifecycle.
- [Adding and Managing Prospects](https://startupkit.app/docs/outreach-prospects.md): Add prospects manually, import CSV, or paste a URL for AI enrichment, with duplicate detection and status tracking.
- [AI Research and Knowledge Base](https://startupkit.app/docs/outreach-ai-research.md): How Kit's AI agent researches prospects, the knowledge base for product context, and confidence scoring.
- [Reviewing and Sending Messages](https://startupkit.app/docs/outreach-messages.md): Review AI-drafted emails, approve or reject drafts, and understand the sending pipeline with daily caps and suppression checks.
- [Handling Replies](https://startupkit.app/docs/outreach-replies.md): How Kit detects prospect replies, classifies sentiment, and helps you respond, including AI-drafted responses.
- [Suppressions, Bounces, and Deliverability](https://startupkit.app/docs/outreach-deliverability.md): Manage your suppression list, understand bounce handling, and protect your sender reputation.
- [Engagement Tracking](https://startupkit.app/docs/outreach-engagement-tracking.md): Track email opens and link clicks to measure campaign performance, with optional custom tracking domains.
- [Notifications & Alerts](https://startupkit.app/docs/outreach-notifications.md): How Kit notifies your team about outreach events. Email alerts, Slack integration, and notification preferences.
- [Remote MCP Servers in Campaigns](https://startupkit.app/docs/remote-mcp-servers-in-campaigns.md): Connect your own MCP servers to give the outreach AI agent access to live tools like CRMs, internal docs, analytics, anything that speaks Model Context Protocol.
- [Outreach Agent](https://startupkit.app/docs/outreach-ai-agent.md): Use the conversational AI agent on any outreach page to check metrics, diagnose campaigns, approve drafts, and surface silver medalist matches.
- [Inbox Drafts](https://startupkit.app/docs/outreach-inbox-drafts.md): Keep outreach drafts, sent mail, and prospect replies synchronized with Gmail, Outlook, Apple Mail, or any IMAP client.
- [Prospect Memory for AI Agents](https://startupkit.app/docs/outreach-agent-memory.md): Durable per-company research memory that external AI agents recall before researching and write back to afterwards, shared across every campaign in your account.
- [Running Outreach Experiments](https://startupkit.app/docs/outreach-experiments.md): Compare campaign variants, interpret reply-rate evidence, and roll out a winner without rewriting sent work.
- [Booking Meetings from Replies](https://startupkit.app/docs/outreach-meeting-booking.md): Configure meeting proposals, let interested prospects pick a safe slot, and handle confirmation, rescheduling, and cancellation.

## Security Training

- [Security Training Overview](https://startupkit.app/docs/security-training-overview.md): What Kit's Training module is, who authors it, and how a security-awareness program is built.
- [Training Template Library](https://startupkit.app/docs/training-template-library.md): Browse Kit's shared library of ready-made decks (SOC 2, GDPR, ISO 27001, HIPAA, plus two evidence checklists) and seed a complete program from one.
- [Build from the Smart Template](https://startupkit.app/docs/training-smart-template.md): Seed a complete 12-slide security-awareness deck, 7-question quiz, and attestation by answering a few company questions.
- [Editing Slides](https://startupkit.app/docs/training-editing-slides.md): Add, edit, reorder, and delete training slides, and use company variables in the rich-text callout.
- [Knowledge Check, Attestation & Publishing](https://startupkit.app/docs/training-quiz-and-attestation.md): Configure the knowledge-check quiz and sign-off attestation, then publish or pause the program.
- [Reminders & Deadlines](https://startupkit.app/docs/training-reminders-and-deadlines.md): How Kit automatically nudges participants who haven't finished their training, and how those reminder emails are paced and personalized.
- [Evidence Checklists](https://startupkit.app/docs/training-evidence-checklists.md): Collect SOC 2 evidence from the people your MDM cannot reach. Contractors and BYOD staff configure their own machines, attest to it, and upload a screenshot you can hand an auditor.
- [Participants, Completion & Recertification](https://startupkit.app/docs/training-participants-completion-and-recertification.md): Invite a training roster, track each person's next action, export proof, and understand annual recertification.
- [Vanta Training Tasks](https://startupkit.app/docs/training-vanta.md): Close Vanta's security-awareness training tasks with Kit training. Link Vanta to the Kit portal, have each person upload their Kit certificate, and keep the register for the audit.

## Performance Reviews

- [Performance Reviews Overview](https://startupkit.app/docs/performance-reviews-overview.md): What Kit's Performance module is, the SOC 2 CC1.4/CC1.5 evidence wedge, and what's included.
- [Review Cycles](https://startupkit.app/docs/performance-review-cycles.md): Create a cycle, set cadence, add participants with default reviewers, and move it through the draft → active → finalized → archived lifecycle.
- [Templates and Questions](https://startupkit.app/docs/performance-templates-and-questions.md): Build versioned review templates with rating scales and competency questions, and understand how the question set is frozen at cycle activation.
- [Writing Reviews](https://startupkit.app/docs/performance-writing-reviews.md): Fill a structured review as manager, peer, or self-reviewer (ratings, questions, narrative), then save drafts, submit, or retract while the cycle is active.
- [Goals and Check-ins](https://startupkit.app/docs/performance-goals-and-checkins.md): Set personal goals, record lightweight progress check-ins, and build the evidence trail that feeds your next review.
- [AI-Drafted Reviews](https://startupkit.app/docs/performance-ai-drafted-reviews.md): Prepare AI review drafts from available goals, prior reviews, and work signals, then check and authorize the content before submission.
- [SOC 2 Evidence and Exports](https://startupkit.app/docs/performance-soc2-evidence-exports.md): The evaluation register, immutable append-only evidence records, integrity verification, and Vanta-shaped CSV/PDF exports for CC1.4 and CC1.5.
- [Work Signal Sources](https://startupkit.app/docs/performance-work-signal-sources.md): Connect GitLab so AI review drafts cite real shipped work. Fetch-on-demand, privacy-scoped, opt-in per draft, never a surveillance warehouse.
- [AI Agent and MCP Tools](https://startupkit.app/docs/performance-ai-agent-mcp.md): Drive review cycles from Kit's in-app AI assistant or any external MCP client. List cycles, submit your reviews, and pull the SOC 2 register conversationally.
