generated: '2026-07-18'
method: searched
probe: false
source: https://www.cobaltai.com/responsible_disclosure/
policy:
- https://www.cobaltai.com/responsible_disclosure/
contact:
- security@cobaltai.com
bug_bounty: false
reward: discretionary
sla:
  acknowledgement: 5 business days
  resolution_target_critical: 10 business days
scope_notes: >-
  Good-faith testing limited to Cobalt-owned domains or those with explicit
  permission. Prohibits DDoS, social engineering, phishing, physical attacks,
  data modification, and compromising Cobalt Robot safety.
evidence:
- source: https://www.cobaltai.com/responsible_disclosure/
  kind: disclosure-page
  keywords: [responsible disclosure, security@, vulnerability]