Trust Centre
Reporting a vulnerability
How to tell us about a security problem, and what we will do.
- How to report
- Email security@nellalabs.com with enough detail to reproduce the issue. If you would prefer to share it encrypted, say so in your first message and we will arrange a channel.
- What we commit to
- We will acknowledge your report, keep you informed of progress, and tell you when it is resolved. We will not pursue legal action against researchers who report in good faith, avoid privacy violations and data destruction, and give us reasonable time to fix the issue before disclosure.
- What we ask
- Do not access, modify or delete data that is not yours. Do not run denial-of-service testing. Do not use social engineering against our people or our clients.
- Recognition
- We do not currently operate a paid bug bounty. We will credit reporters publicly with their permission.
Questions
Ask us anything about this
Security and privacy questions reach a person who works on the platform, not a sales inbox.