generated: '2026-07-18'
method: searched
probe: true
source: https://dreambase.com/legal/vulnerability
policy:
- https://dreambase.com/legal/vulnerability
contact:
- support@dreambase.ai
bug_bounty: false
recognition: Hall of Fame listing for significant contributions
safe_harbor: true
timelines:
  acknowledgment: within 3 business days
  triage: within 7 days
  remediation_plan: within 14 days
scope:
  in_scope:
  - Dreambase web app
  - Dreambase APIs
  - Slack integration
  - authentication flows
  - Vercel-hosted endpoints
  out_of_scope:
  - social engineering
  - physical security
  - DDoS / stress testing
  - third-party platforms (Vercel, Supabase, etc.)
evidence:
- source: https://dreambase.com/legal/vulnerability
  kind: disclosure-policy
  keywords: [vulnerability disclosure, coordinated disclosure, safe harbor, security contact]