Back to Trust Center

Responsible Disclosure

Report a vulnerability

We encourage security researchers to share findings so we can remediate quickly. Follow the guidelines below to ensure a safe and coordinated response.

How to report

  • Email security@obscurelabs.com with encrypted details (PGP key available on request).
  • Include proof-of-concept, impact assessment, and remediation suggestions if available.
  • We acknowledge within 24 hours and share remediation timelines as they are available.

Commitments

  • No legal action for good-faith research adhering to these guidelines.
  • Attribution in release notes or Hall of Fame (optional).
  • Coordinated disclosure with agreed-upon timelines.