Vulnerability Disclosure Policy

Report suspected vulnerabilities with the form below or to contact@rebolt.ai, including the steps to reproduce.

We acknowledge reports within 3 business days and keep reporters updated until the issue is resolved.

Safe harbor: we will not take legal action against good-faith research that follows this policy. Do not access or modify customer data, degrade the service, or use social engineering or physical attacks.

Please give us reasonable time to fix an issue before disclosing it publicly.

We do not run a paid bug bounty at this time.

More on how we protect customer data is in our Trust Center.