Responsible Disclosure

How to report an issue

Email hello@densitiai.com with “Security disclosure” in the subject line. Please include:

• The affected domain, product, endpoint, or version.
• A clear description of the issue and its potential impact.
• Steps to reproduce, including a minimal proof of concept when appropriate.
• How we may contact you for follow-up.

Please do not include sensitive personal information or unnecessary customer data in the initial report.

Research guidelines

To help us evaluate good-faith reports, please:

• Make a good-faith effort to avoid privacy violations, data loss, and interruption of services.
• Access only the minimum information necessary to demonstrate the issue.
• Do not use denial-of-service testing, destructive techniques, social engineering, physical attacks, or attacks against third parties.
• Do not retain, disclose, or transmit data obtained during research.
• Give us reasonable time to investigate and remediate before public disclosure.

What you can expect

We will make a reasonable effort to acknowledge a credible report, investigate it, and keep you informed as appropriate. Please understand that remediation time varies with severity and complexity.

Scope

This guidance applies to internet-accessible systems owned and controlled by Densiti AI Inc. Third-party services and customer-controlled deployments are outside our scope and should be reported to their respective owners.