At Parallel AI, we take the security of our platform and our customers’ data seriously. We welcome and value the work of independent security researchers,
and we invite you to help us keep our systems safe by responsibly disclosing any vulnerabilities you discover.
## How to report a vulnerability
If you believe you’ve found a security vulnerability, please email us at security@parallellabs.app using the subject line:
[Bug Bounty]followed by a short description of the issueExample:
[Bug Bounty] Stored XSS in dashboard comment field
To help us triage and respond quickly, please include:
- Step-by-step instructions to reproduce it
- Any proof-of-concept code, screenshots, or request/response logs
- The affected URL, endpoint, or component Rewards Rewards are offered at our discretion, based on the severity, impact, and quality of each report. We evaluate every valid submission individually and may
recognize researchers with a monetary reward and/or public acknowledgement. There are no fixed payout amounts. Scope In scope: Out of scope: Responsible disclosure guidelines We ask that researchers: - Give us a reasonable opportunity to investigate and remediate before any public disclosure.
- Make a good-faith effort to avoid privacy violations, data destruction, and service disruption.
- Only interact with accounts you own or have explicit permission to test.
- Do not access, modify, or exfiltrate data that does not belong to you. Safe harbor We will not pursue legal action against researchers who discover and report vulnerabilities in good faith and in accordance with these guidelines. Our commitment When you submit a report, we will:
- Acknowledge receipt within business days.
- Keep you informed as we investigate and work toward a fix.
- Credit you for the discovery if you wish, once the issue is resolved.
Thank you for helping keep Parallel Labs and our users secure.