Found something? Tell us. Good-faith security research under this policy is welcome.
Give us enough to reproduce the issue and we will confirm receipt, work the finding, and tell you where it stands whenever you ask. If you believe something is being actively exploited, say so in the first field; that answer changes who sees this and how quickly.
Is this being actively exploited, as far as you know?
Where did you find it?
- Select -
This website
A Veribound device agent
The administrative console
The Veribound platform or its APIs
Somewhere else, or not sure
One-line summary
Details and reproduction steps
What you did, what you expected, what happened instead. Versions, URLs, requests, and anything else we would need to see it ourselves. The more reproducible this is, the faster it moves.
Impact, as you assess it
What an attacker gains. Optional, but it helps us triage.
Your name or handle
You may credit me publicly if you write this up.
CAPTCHA
Safe harbor
We will not pursue or support legal action over security research conducted in good faith under this policy.
Good faith means using only the access needed to demonstrate an issue, leaving data and availability alone, staying out of customer environments, reporting promptly, and allowing a reasonable period for remediation before public disclosure.
Not a vulnerability report?
Security questionnaires, architecture review, and documentation requests go through the contact form .
