[Program]: atlan.com

[batamaji]

Company

atlan.com

Program URL

https://atlan.com/responsible-disclosure-program/

Contact

security@atlan.com

Description

This Vulnerability Disclosure Policy (VDP) establishes guidelines for security researchers to report vulnerabilities they discover in Atlan’s systems. We are committed to working with researchers who act in good faith to help us maintain the highest security standards.

Rewards

• *bounty
• *recognition
• *swag

Program type

vdp

Status

active

Safe harbor

No response

Allows disclosure

No response

Domains

*.atlan.com (excluding explicitly out-of-scope domains listed below)
Atlan’s main application and associated services that process customer data
API endpoints and authentication systems

Structured scope

No response

Out of scope

https://atlan.com (Marketing website)
Open Source Repositories
https://metadatabank.atlan.com
Third-party services not owned or controlled by Atlan, including:
https://blog.atlan.com
https://university.atlan.com
https://humansofdata.atlan.com
https://docs.atlan.com

Excluded methods

• dos
• social_engineering
• phishing
• physical_access
• automated_scanning

Requires account

No response

Minimum payout

No response

Maximum payout

No response

Currency

No response

Payout - critical

No response

Payout - high

No response

Payout - medium

No response

Payout - low

No response

Swag details

Amazon gift cards, Atlan swag and merchandise Public recognition on our Hall of Fame

Testing policy URL

No response

Response SLA days

No response

Disclosure timeline days

No response

Legal terms URL

No response

Hall of fame URL

No response

Reporting URL

No response

PGP key URL

No response

Preferred languages

No response

Standards

No response

Confirmation

• I confirm the information is accurate and I have included only publicly documented program details.

[liss-bot]

Hey @batamaji, thank you for your submission!
I've created a PR at #69 to get this merged in 😊