Rezo · Vulnerability Disclosure

Rezo Vulnerability Disclosure

Vulnerability disclosure

Rezo publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyCustomer ExperienceContact CenterConversational AIAgentic AICustomer SupportSpeech AnalyticsAutomation
Program:

Disclosure Policy

Policy
https://www.rezo.ai/vulnerability-disclosure-program

Security Contact

Contact
vdp@rezo.ai

Source

Vulnerability Disclosure

rezo-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://www.rezo.ai/vulnerability-disclosure-program
policy:
- https://www.rezo.ai/vulnerability-disclosure-program
contact:
- vdp@rezo.ai
bug_bounty: false
reward: recognition-only
recognition: Hall of Fame acknowledgement (no monetary bounty)
response_sla: 7-10 working days to acknowledge and respond
scope:
  in_scope:
  - name: Central Data Hub
    host: my.rezo.ai
  - name: Autonomous Conversation Matrix
    host: az-converse.rezo.ai
  focus_areas:
  - data exfiltration
  - business logic flaws
  - remote code execution
  - SQL and command injection
  - authentication bypass
  - cross-site scripting (XSS)
  - CSRF
  - privilege escalation
policy_terms:
  public_disclosure: prohibited without written consent
  automated_tools: brute-force / automated tooling prohibited
  data_handling: researchers must delete any non-public or PII data after reporting
evidence:
- source: https://www.rezo.ai/vulnerability-disclosure-program
  kind: disclosure-page
  keywords: [vulnerability disclosure, responsible disclosure, vdp@rezo.ai, hall of fame]