generated: '2026-08-01'
method: searched
probe: true
source: https://www.deepwatch.com/vulnerability-disclosure/
policy:
- https://www.deepwatch.com/vulnerability-disclosure/
contact:
- security@deepwatch.com
program:
  type: coordinated-disclosure
  bug_bounty: false
  bounty_platform: null
  note: 'Deepwatch runs a coordinated vulnerability disclosure program by email. No
    HackerOne, Bugcrowd or Intigriti bounty program was found on the policy page.
    The SafeBase trust center asks researchers to use the subject line "SafeBase Responsible
    Disclosure Report for Deepwatch".'
security_txt:
  published: false
  note: /.well-known/security.txt returns 404 on deepwatch.com and www.deepwatch.com.
    The 200 served at status.deepwatch.com/.well-known/security.txt is Atlassian Statuspage's
    own file, not Deepwatch's.
scope: Vulnerabilities, privacy issues, exposed data, or other security issues in
  Deepwatch systems.
safe_harbor:
  offered: true
  provisions:
  - Research conducted per the policy is authorized in accordance with the Computer
    Fraud and Abuse Act (CFAA)
  - Exempt from DMCA claims for circumvention of technological controls
  - Exempt from Terms and Conditions restrictions that would interfere with security
    research
researcher_obligations:
- Limit data access to the minimum required for proof of concept
- Cease testing immediately on encountering user data such as PII or PHI
- Do not disclose publicly until the issue has been addressed
response_commitments:
- Respond to the report promptly and work with the reporter to understand and validate
  it
- Maintain progress updates while the vulnerability is processed
- Remediate discovered vulnerabilities in a timely manner within operational constraints
evidence:
- source: https://www.deepwatch.com/vulnerability-disclosure/
  kind: disclosure page
  http_status: 200
  fetched: '2026-08-01'
- source: https://www.deepwatch.com/trust/
  kind: security and trust page
  note: repeats the responsible-disclosure request and disclosure contact
- source: https://security.deepwatch.com/
  kind: trust center (SafeBase)
  note: publishes the responsible-disclosure reporting address