Legal

Vulnerability Disclosure

Responsible disclosure program for security researchers.

Version 1.0 · Last updated 6/20/2026

## Reporting Email security@defenailabs.com with detailed reproduction steps, affected versions, and impact assessment. PGP key available on request. ## Response SLA - Critical: 24 hours acknowledgment - High: 72 hours - Standard: 7 business days with remediation timeline ## Safe Harbor Good-faith security research conducted within scope will not face legal action. Do not access customer data or disrupt production services.