Cognite

Program Details

Vulnerability disclosure policy covering Cognite services and software. Reports go to [email protected], with a response within five working days and triage within ten. Cognite states it offers no monetary or non-monetary rewards.

Allows Disclosure

No

Response SLA

5 business days

Rules & Testing

Out of Scope

Non-exploitable findings and best-practice reports such as missing security headers, TLS configuration weaknesses such as weak cipher suites or TLS 1.0 support

security.txt

Contact

mailto:[email protected]

Policy

https://docs.cognite.com/cdf/trust/vulnerability-disclosure-policy

Expires

Dec 31, 2028