Security
Security disclosure.
Reporting a vulnerability
Report suspected security issues to [email protected]. Please include a clear description, steps to reproduce and any relevant context. Encrypted communication is available on request.
In scope
This website (otislabs.ai) and any publicly linked demonstration surface operated by OTIS Labs. Internal research systems, third-party services and unrelated infrastructure are out of scope.
Good-faith research
OTIS Labs will not pursue action against researchers who investigate in good faith, avoid privacy violations and refrain from service disruption or data exfiltration.
Expected response
We aim to acknowledge reports within five business days and to provide a status update or resolution timeline within thirty days.