Replay · Vulnerability Disclosure

Replay Vulnerability Disclosure

Vulnerability disclosure

Replay publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyDebuggingTestingQuality AssuranceDeveloper ToolsTime Travel DebuggingMCPGraphQLBrowser AutomationAI
Program:

Disclosure Policy

Policy

Security Contact

Contact
security@replay.io

Source

Vulnerability Disclosure

replay-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-20'
method: searched
probe: true
policy: [https://www.replay.io/privacy-policy]
contact: [security@replay.io]
evidence:
  - {source: https://www.replay.io/privacy-policy, kind: security-policy, detail: "Security & Privacy documentation invites security researchers to email security@replay.io; the Replay browser auto-updates with security patches."}
notes: >
  No /.well-known/security.txt is served (404 on api/www/app/docs) and /security is a 404.
  Disclosure is via the published security contact security@replay.io, documented on the
  Security & Privacy (privacy policy) page.