Eclypsium · Vulnerability Disclosure

Eclypsium Vulnerability Disclosure

Vulnerability disclosure

Eclypsium publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanySecurityCybersecurityFirmware SecuritySupply Chain SecurityHardware SecurityInfrastructure SecurityEndpoint SecurityThreat Detection
Program:

Disclosure Policy

Policy
Policy

Security Contact

Contact
security@eclypsium.com

Source

Vulnerability Disclosure

eclypsium-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-19'
method: searched
probe: true
policy:
  - https://eclypsium.com/vulnerability-disclosure-policy/
  - https://eclypsium.com/security/
contact:
  - security@eclypsium.com
disclosure:
  model: coordinated
  vendor_notification_days: 7      # notifies affected vendors within 7 business days
  patch_window_days: 90            # 90 days for patching before public disclosure
  public_disclosure: after-fix     # will not confirm/discuss/disclose until a fix is released
bug_bounty: null                   # no HackerOne/Bugcrowd/Intigriti program found
evidence:
  - source: https://eclypsium.com/vulnerability-disclosure-policy/
    kind: disclosure-policy
  - source: https://eclypsium.com/security/
    kind: security-page
    note: "Security and Trust page directs researchers to email the security team and follow coordinated disclosure"