Legal
Security disclosure
If you find a vulnerability in this site, a model release or a product built on our research, tell us privately first.
How to report
Subject: Security
Include
- What is affected.
- Steps to reproduce.
- What an attacker could do.
What we commit to
- We acknowledge your report and keep you updated.
- We do not take legal action against good-faith research that follows this policy.
- We credit you when the fix is published, if you want.
Out of scope
- Social engineering of staff.
- Denial-of-service testing.
Products
Vulnerabilities in Media Studio, Media Monitor or Viber are passed to OneThought AI.