Laurel Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://www.laurel.ai/security
program: Vulnerability Disclosure Program (VDP)
bug_bounty: false
policy:
- https://www.laurel.ai/responsible-disclosure-policy
contact: []
security_txt: false
notes: Laurel's security FAQ states it maintains an active Vulnerability Disclosure Program and
  points researchers to a Responsible Disclosure Policy page for full policy, scope and submission
  instructions. It describes a VDP rather than a paid bug bounty. No /.well-known/security.txt is
  served on any Laurel host (all return 404/401), and no security@ contact address is published on
  the policy page.
evidence:
- source: https://www.laurel.ai/security
  kind: disclosure statement
  quote: 'Yes, we maintain an active Vulnerability Disclosure Program (VDP). Security researchers can
    find our full policy, scope, and instructions on how to submit a report at our Responsible
    Disclosure Policy page'
- source: https://www.laurel.ai/responsible-disclosure-policy
  kind: policy page
  status: 200