Report a vulnerability
Email [email protected] with the subject “Security report”. Include the affected product or service, reproduction steps, technical impact, supporting logs or screenshots where appropriate, and a way to contact you. Redact unrelated personal data and secrets.
Responsible coordination
Use the minimum testing necessary to demonstrate the issue. Do not access unnecessary user information; destroy or modify data; degrade availability; use social engineering; or access systems without authorization. Coordinate reasonable remediation before publicly disclosing unresolved vulnerabilities. Do not demand payment as a condition of withholding disclosure.
Scope and boundaries
This reporting channel concerns systems operated by Granite Signal Labs. Third-party providers maintain their own reporting policies. This page does not authorize intrusive testing or activities prohibited by law, and does not create a safe-harbor agreement.
What to expect
We welcome actionable reports and may follow up for additional information. Response and remediation timing depend on the issue. Do not email passwords, authentication tokens, private keys, or full customer datasets.
No bounty commitment
Submitting a report does not create entitlement to payment, a bounty, employment, a contract, or other compensation unless Granite Signal Labs separately agrees in writing. No bug bounty program is offered by this page.