generated: '2026-07-19'
method: searched
probe: true
policy:
  - https://eclypsium.com/vulnerability-disclosure-policy/
  - https://eclypsium.com/security/
contact:
  - security@eclypsium.com
disclosure:
  model: coordinated
  vendor_notification_days: 7      # notifies affected vendors within 7 business days
  patch_window_days: 90            # 90 days for patching before public disclosure
  public_disclosure: after-fix     # will not confirm/discuss/disclose until a fix is released
bug_bounty: null                   # no HackerOne/Bugcrowd/Intigriti program found
evidence:
  - source: https://eclypsium.com/vulnerability-disclosure-policy/
    kind: disclosure-policy
  - source: https://eclypsium.com/security/
    kind: security-page
    note: "Security and Trust page directs researchers to email the security team and follow coordinated disclosure"