Security / Coordinated disclosure

Send enough to route it. Then stop

Found a possible weakness in a Bypass Labs system? Stop after the minimum proof and contact us.

First report

Your first note should be short

Email info@bypasslabs.ai with the subject “Bypass security report.” Name the affected product or domain and provide a brief, non-sensitive description.

COVERED BY THIS CONTACT

Bypass-operated systems

  • Public Bypass Labs websites
  • The private-beta Bypass testing platform
  • Released Bypass Labs client software
NOT COVERED

Systems we do not own

  • Customer environments
  • Third-party services and integrations
  • Look-alike domains or unrelated products
NO IMPLIED AUTHORIZATION

A report does not authorize continued testing

Do not access another person’s data, degrade a service, retain unrelated information, or send working credentials over ordinary email.

What happens next

What happens after you report

We confirm the asset, acknowledge the report, and arrange a protected way to receive the supporting evidence.

  1. 01

    We verify the asset

    The team confirms whether the affected domain, product, or released client belongs to Bypass Labs.

  2. 02

    We establish the channel

    If we need more detail, we agree on the evidence channel before you send it.

  3. 03

    We coordinate follow-up

    We keep the reporter informed about triage and request only the evidence needed to understand the issue safely.

SECURITY REPORT STARTinfo@bypasslabs.ai

Subject: “Bypass security report”

Secure-channel guidance  ↗
PRIVATE BETA

Pentest your next release

Bring Bypass Labs the product. Get back proof, fix instructions, and a retest.