Thinking Machines · Vulnerability Disclosure

Thinking Machines Vulnerability Disclosure

Vulnerability disclosure

Thinking Machines Lab publishes a Coordinated Vulnerability Disclosure Policy and a security.txt. It operates a coordinated-disclosure program with an explicit safe harbor, but no paid bug bounty.

Thinking Machines publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyAiArtificial IntelligenceMachine LearningFine-TuningLLMModel TrainingDeveloper Tools
Program:

Disclosure Policy

Security Contact

Contact
security-reports@thinkingmachines.ai

Source

Vulnerability Disclosure

thinking-machines-vulnerability-disclosure.yml Raw ↑ 
generated: 2026-07-21
method: searched
source: >-
  https://thinkingmachines.ai/security/disclosure-policy/ +
  https://thinkingmachines.ai/.well-known/security.txt
name: Thinking Machines vulnerability disclosure
description: >-
  Thinking Machines Lab publishes a Coordinated Vulnerability Disclosure Policy
  and a security.txt. It operates a coordinated-disclosure program with an
  explicit safe harbor, but no paid bug bounty.
program:
  type: coordinated-disclosure
  bug_bounty: false
  bounty_note: >-
    "We do not operate a bug bounty program and do not offer monetary rewards or
    compensation of any kind for vulnerability reports."
policy_url: https://thinkingmachines.ai/security/disclosure-policy/
security_txt:
  url: https://thinkingmachines.ai/.well-known/security.txt
  contact: mailto:security-reports@thinkingmachines.ai
  encryption: https://thinkingmachines.ai/.well-known/pgp-key.txt
  expires: '2029-07-13T07:00:00.000Z'
safe_harbor: true
safe_harbor_note: >-
  Good-faith research conducted in compliance with the policy is considered
  authorized; the company will not pursue legal action under the CFAA or DMCA
  anti-circumvention provisions and will waive conflicting ToS/AUP restrictions
  to the extent necessary for disclosure.
contact: security-reports@thinkingmachines.ai