We would like to thank the following security researchers for their responsible disclosure of vulnerabilities. Their contributions help keep Parallel Labs and our users safe.
2025
No submissions yet. Be the first to report a vulnerability!
Recognition Guidelines
This page lists the researchers who have responsibly disclosed a security issue to us and agreed to be credited. It is a thank-you list, not a bounty leaderboard: we credit the person who found the issue and gave us time to fix it, whether the flaw was in an authentication flow, an API endpoint or a third-party integration.
To be listed in our Hall of Fame, researchers must:
- Follow our Vulnerability Disclosure Policy
- Report a valid, previously unreported vulnerability
- Allow us reasonable time to fix the issue before public disclosure
- Not exploit the vulnerability beyond what is necessary for demonstration
Credit is given at the researcher's discretion. You can ask to be listed under a handle rather than your real name, and you can ask to be left off this page entirely; either way the report still counts. We do not publish the technical details of a fixed issue until the affected customers have had time to update, which is why the entries below show a date and a severity rating rather than a reproduction path.
We triage every report within two business days. A triaged report gets an owner inside engineering, a severity rating against the same scale we use internally, and a written update when a fix ships. If we disagree with a severity rating, we say so and explain the reasoning rather than going quiet. Researchers who prefer not to be named publicly can still request the credit internally, and we will confirm the fix in writing either way.
Report a Vulnerability
Found a security issue? Report it here and you could be featured on this page.