Disclosures

Kaellabs maintains a responsible disclosure policy for any security findings affecting our own products or those of partners we work with directly.

Researchers acting in good faith may report findings through our coordinated disclosure channel. We aim to acknowledge reports within two business days and resolve qualifying issues within ninety days.

We do not currently offer a paid bug bounty. We do credit researchers in the journal when a finding is published.