Vulnerability Disclosure Policy

If you believe you've discovered a security issue related to Enclave, please email us at security@enclave.io with a full description of the vulnerability. We ask that you keep the details private until we've had a chance to resolve the issue.

Public Notification

The Enclave team will coordinate public notification of the vulnerability with you. To protect users, we ask that you do not share details of the vulnerability with the public until we've had time to research and address the issue.

Bug Bounty

At this time we do not operate a bug bounty programme and are unable to offer financial rewards for vulnerability reports.

---

Document Version 1.0 - Published February 07, 2023