Leo Labs Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://www.leolabs.space/vulnerability-disclosure/
program:
  published: true
  name: LeoLabs Vulnerability Disclosure Policy
  url: https://www.leolabs.space/vulnerability-disclosure/
  contact: security@leolabs.space
  bug_bounty: false
  bug_bounty_platform: null
  safe_harbor: true
  safe_harbor_summary: LeoLabs commits not to pursue or support legal action related to
    the research of security researchers who act in good faith and comply with the policy.
  coordinated_disclosure: true
  coordinated_disclosure_summary: Researchers are asked to keep findings confidential until
    LeoLabs has remediated and a public disclosure has been coordinated.
  scope: Vulnerabilities in LeoLabs products and systems.
  researcher_obligations:
  - Do not access, modify or destroy data the researcher is not authorized to access.
  - Maintain confidentiality until remediation and coordinated disclosure.
response_targets:
- stage: acknowledgement
  target: prompt acknowledgement of receipt
- stage: validation
  target: vulnerability confirmed within 72 hours
- stage: remediation
  severity: high or critical
  target: 30 days
- stage: remediation
  severity: moderate
  target: 90 days
- stage: remediation
  severity: low or informational
  target: 180 days
security_txt:
  published: false
  probed:
  - url: https://www.leolabs.space/.well-known/security.txt
    status: 404
  - url: https://api.leolabs.space/.well-known/security.txt
    status: 404
  - url: https://platform.leolabs.space/.well-known/security.txt
    status: 404
  note: LeoLabs publishes a disclosure policy page but does not serve an RFC 9116
    /.well-known/security.txt on any probed host.
evidence:
- source: https://www.leolabs.space/vulnerability-disclosure/
  kind: disclosure page
  keywords:
  - vulnerability
  - responsible disclosure
  - safe harbor
  - security@leolabs.space