Lightsource Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: false
source: https://lightsource.ai/security
# The mechanical probe (probe-security-programs.py) returned vdp=none because the
# marketing site renders client-side and serves catch-all HTML for
# /.well-known/security.txt. The disclosure statement below was read directly
# from the published /security page on 2026-07-19.
policy:
- https://lightsource.ai/security
contact:
- security@lightsource.ai
security_txt: false
bug_bounty:
  program: false
  platform: null
statement: >-
  "If you believe you've discovered a bug in LightSource's security, please get
  in touch at security@lightsource.ai. Our security team promptly investigates
  all reported issues."
practices:
- Annual third-party penetration testing
- Continuous vulnerability scanning
- Continuous monitoring of 100+ security controls
- Formal Secure Development Life Cycle procedures
evidence:
- source: https://lightsource.ai/security
  kind: security-page
  found: [responsible disclosure statement, 'security@lightsource.ai']