We take security seriously. If you've discovered a vulnerability in Gray Swan's products or infrastructure, we want to hear from you.
Report vulnerabilities to: security@grayswan.ai
Out of scope: Third-party services, social engineering of employees, denial of service attacks.
We will not pursue legal action against researchers who report vulnerabilities in good faith and in accordance with this policy.
We may publicly acknowledge researchers who report valid vulnerabilities (with permission). While we don't currently operate a formal bug bounty program, we may offer rewards at our discretion for significant findings.
