Strise · Vulnerability Disclosure

Strise Vulnerability Disclosure

Vulnerability disclosure

Strise publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyFintechRegTechAMLKYCKYBComplianceFinancial CrimeScreeningSanctionsPEPGraphQLMCP
Program:

Disclosure Policy

Policy

Security Contact

Contact
security@strise.ai

Source

Vulnerability Disclosure

strise-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-21'
method: searched
probe: true
source: https://docs.strise.ai/technology/bug-bounty-program/
program: Strise Bug Bounty Program
contact: [security@strise.ai]
policy: [https://docs.strise.ai/technology/bug-bounty-program/]
disclosure: coordinated
rewards:
  currency: USD
  range: [50, 10000]
  bands:
  - {severity: low, range: [50, 500]}
  - {severity: medium, range: [501, 2500]}
  - {severity: high, range: [2501, 5000]}
  - {severity: critical, range: [5001, 10000]}
rules:
- No data exfiltration, service degradation, or unauthorised access to customer data.
- No automated scanning tools.
- No social engineering, spam, or denial-of-service.
- Disclose only to the Strise security team; no public disclosure before remediation.
security_txt: false     # no /.well-known/security.txt published (404)
evidence:
- {source: https://docs.strise.ai/technology/bug-bounty-program/, kind: bug-bounty-page}