Legal
Vulnerability Disclosure
Responsible disclosure program for security researchers.
Version 1.0 · Last updated 6/20/2026
## Reporting
Email security@defenailabs.com with detailed reproduction steps, affected versions, and impact assessment. PGP key available on request.
## Response SLA
- Critical: 24 hours acknowledgment
- High: 72 hours
- Standard: 7 business days with remediation timeline
## Safe Harbor
Good-faith security research conducted within scope will not face legal action. Do not access customer data or disrupt production services.