Vela Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: https://trust.tryvela.ai/
policy:
- https://trust.tryvela.ai/
contact: []
notes: >-
  Vela publishes no /.well-known/security.txt (404 on tryvela.ai and
  api.tryvela.ai) and no standalone disclosure page (/security is a 404).
  Its SafeBase trust center at trust.tryvela.ai lists a "Responsible
  Disclosure" program under Application Security, alongside penetration
  testing and a downloadable pentest report; researchers are directed to
  the trust center to engage. No public bug bounty (HackerOne/Bugcrowd/
  Intigriti) program was found.
evidence:
- source: https://trust.tryvela.ai/
  kind: trust-center
  keywords:
  - responsible disclosure
  - penetration testing
  - pentest report