Corelight (fka Broala) · Vulnerability Disclosure

Corelight Fka Broala Vulnerability Disclosure

Vulnerability disclosure

Corelight (fka Broala) runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyCybersecurityNetwork Detection and ResponseNDRNetwork SecurityThreat DetectionZeekOpen SourceNetwork Monitoring
Program: Hackerone

Disclosure Policy

Policy
https://corelight.com/support/security

Security Contact

Contact
securityreport@corelight.com

Source

Vulnerability Disclosure

corelight-fka-broala-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
source: https://corelight.com/support/security
policy:
  - https://corelight.com/support/security
contact:
  - securityreport@corelight.com
pgp:
  key_id: 5EE1855F1D8EA6A2
response_target: within 48 hours
bug_bounty: none
evidence:
  - source: https://corelight.com/support/security
    kind: responsible-disclosure-page
    detail: >-
      Dedicated "Report a security vulnerability" page. Reports go to
      securityreport@corelight.com; a PGP public key (KeyID 5EE1855F1D8EA6A2)
      is offered for encryption; researchers asked to keep findings
      confidential until addressed; response targeted within 48 hours. No
      public bug bounty (HackerOne/Bugcrowd) is advertised.