Sifflet Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: https://docs.siffletdata.com/docs/how-to-report-a-security-incident.md
policy:
  - https://docs.siffletdata.com/docs/how-to-report-a-security-incident.md
  - https://www.siffletdata.com/product-security
contact:
  - security@siffletdata.com
bug_bounty: false
process: >-
  Report security events by email to security@siffletdata.com; customers may also route
  through their Customer Success Manager. Sifflet performs triage on all reports and follows
  up on valid reports, but does not guarantee a reply to every email. No bug bounty is
  offered. An independent third-party penetration test is performed at least once per year.
evidence:
  - source: https://docs.siffletdata.com/docs/how-to-report-a-security-incident.md
    kind: disclosure-page
    keywords: [security@siffletdata.com, report a security incident]
  - source: https://docs.siffletdata.com/docs/security.md
    kind: security-policy
    keywords: [ISO 27001, SOC 2 Type 2, annual penetration test]