LEGAL
Vulnerability Disclosure
How to report a security issue in VENRAC.
How to report
Email security@venrac.com with the affected surface, the steps to reproduce and the impact you observed. A machine-readable contact is published at /.well-known/security.txt.
What to avoid
Do not access another tenant's data, degrade the service, or run destructive tests. Use your own account and domain for testing.
What to expect
Acknowledgement, an assessment, and an update when a fix ships. Reports are handled without legal action against good-faith research that follows this policy.
Out of scope
Findings on third-party AI providers or on customer-owned systems belong to those parties.