Polar Signals · Vulnerability Disclosure

Polar Signals Vulnerability Disclosure

Vulnerability disclosure

Polar Signals runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyEnterpriseObservabilityContinuous ProfilingPerformanceeBPFgRPCDeveloper ToolsMCPGPU
Program: Hackerone

Disclosure Policy

Security Contact

Contact
security@polarsignals.com

Source

Vulnerability Disclosure

polar-signals-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: false
source: https://www.polarsignals.com/docs/security-posture
contact:
- security@polarsignals.com
policy: []
practices:
- Yearly third-party penetration testing.
- Data encrypted in transit and at rest.
- Role-based access controls with strict permission boundaries.
- >-
  Profiling data captures function memory offsets via eBPF unwinding, not PII,
  request payloads, tokens, or secrets.
evidence:
- source: https://www.polarsignals.com/docs/security-posture
  kind: docs-security-page
  detail: >-
    Security posture page publishes a security contact (security@polarsignals.com)
    and describes vulnerability handling and pen-testing cadence.
notes: >-
  No /.well-known/security.txt was found (404 on www, api, and cloud hosts);
  no public bug-bounty program (HackerOne/Bugcrowd/Intigriti) was found.