Reporting and bug bounties

How to report security findings

If you believe you’ve found something in a Tonic.ai product that has security implications, email your findings to security@tonic.ai.

To report security findings over a secure channel, use the following key to encrypt your message.

PGP Key
-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGapMYYBEADJGTfx7PtnGgWjCsQxAd75e0rq1RnFh6tyZGOZWO9PJ/c81O/Y
LmAemqZX3gnTuKFv0 4t4Ya6kBym  0WtHhan1aZL2rMhN31YjcUT4zg PMmtk0j
EA4q14kHO6K6mGBSIO5SmQyna1O DZw lEetejPxDSBcAHR6HyQRJjXBtKRYueTq
I3L/FrF1Xb9h1KBhl8j lTZcYTbK/LTJYzJ3KjCEoZat0b/7f4uHvedM9 BZmBqz
DDcbhqPYe knybDsE/jBjpKrL3N4RYhmDdcDQem7OVmVAZFyEhdd7kIhCWflwF6a
NnoBvEEz7V72mufNu45ZYQgWX13CzJv/9uzkZIBKgL39KoB8/WMTN4zOOF5ooyr
pMLMfVKuZlOi2WGXtuCCad7z3DFGtFy3q5/bqQr9UF7FgFfkjM9s059FhH99XJ/w
zG8UPwJdU2/72wC bvop9AnJtH6UaIrYAiR6KYm8iICNhvuWv2YPwU537Cethil9
KrvYCFawKpPSDtp0a4G0sw8yRUMw/e rC0c61yWS8TiF8gW 2Ut3ZEC5OvL0OIG7
ChPR8H2q57A2HlPB78HBUNOY LFnUpfO7VTACnGjH4i7MmcFrfS4qMcfPBpQk9jb
ce7cNLS4AZXUq4EQBbnfbZgUdYIXYGiS9snOV8wYHY0LhqYWzz8hmLcuuQARAQAB
tCJUb25pYyBTZWN1cml0eSA8c2VjdXJpdHlAdG9uaWMuYWk iQJUBBMBCAA FiEE
sIrZs/QhVnDSEaHuBNbs/Ac639UFAmapMYYCGwMFCQeGHzUFCwkIBwIGFQoJCAsC
BBYCAwECHgECF4AACgkQBNbs/Ac639XgchAAtBhcQZSID3yVJG0Qfg1T7UjMJDD9
P/EWHcHU4HlYO5Zm7t86uvzGBkk2/ZQ3xadkeJ0r/7VtSM/q2ysB4kXVuDLDiGDt
207ka6kjspVzxshbAxoewk1lX1fyNVyR/9lSL7sHg6mtDszYeSdHOb081s2d0B/M
/f6T6UdWqCTKXieMx465BS41HOtiK7LEC3OVDel7Yzu5fGC7F0/ajMjTccp72LH/
VyitvwTPwaQyFkG9EbSM1tjfV4zTvFdqQSpYqmEGgNuXR82r o ECnXPeRQOTj4Z
9tBeU9es1zDpoVuhDzdxI1DZAH40cD1Z2u2wClVaoP79NSLEo3tCgijv0rPWhOqg
X3Q/7iHeXSBadORISe/zWb8c8oqNdZEbwv3AzbBjkWhZPpGNdxRmzZKLOx1JW29u
Rb/dzbeUQCLh2GIfbsAYOXoWM3QCw1X2AMaNcJNfHiL/6eenf2 xEoAG3980TSBj
f3WtSfS/UzpgSI0ubwo3hbRXDdB3FWK0OxU2Gaxh03rw2Swt3Hxg8L40zFrM4cYY
Jsr4FFuz0yNeZ1YJuho Bm mxowdcuqDIogo1gBQvjjd293nS0LilUZRKs3fZOVZ
VUCTc 1Ev087Rgc4ny TZ7i/TyRYaqhW6/RgdefOkd1bzsI iF 6quE4JtOI4wqf
53wD6BRaKBTjw8C5Ag0EZqkxhgEQALGu1ssRleBAgBgehkSEofahY5yskh9ZBYYi
4JPuKmt8e mdoJW/24CyIY9y1F22W9P8XtUOQUhNWvhYuz8BMMXEVLuNfVsRAhqB
mCgJnN6Hgn1ZyK4PRTqJ728/vsEiNb/d4aKvrfJDNmazRyUTsv4j2S9amdrIDI0C
so0qZJK6/cP2NPw05kUsKA5tmm R8m5lsVtZfphw9ruZRN/rGA4FPtzmFbGNjvSD
dvMTlkXC4vm4OzOfDi2PooRWAC29ozxEF5o9GG47vFY63UhKmG3dYJxNNU2FCxr0
MTvwrXvaNyMDSHDcEPZ1rZccvEugo9sYlsOblC5OY6ky9SDff4uudPTP1rxuCP43
dbxqgvxPwpEtp6WsNVOYjeL7/l DWnYhFERVgx3s4NvF4eBz/kk1dqzHdWtyCX1r
vUJdIjBhY4sehmbu jBqvdu4XQsyuYPOZVJ6xYkIzUe0s4SrKma6cUKsxWaIRTGL
F3GuQQnUsBEf1gqUqKDJYquZk3ESY9CyzwmJHwppezKkdA7Sh3aPVo2D0kztHbcB
4wPsK3oEodt279FIUvRCF32mfgMXPwj4kxeXnvtvlBupuc7CEfGd46wpu9fRJ8uK
1sYQPMCLMgX49MMyHcqcyanRMmZLxVgU27cAr7bK EPQMsFJj93HaPW4hxmdhFXa
RoF0NHQRABEBAAGJAjwEGAEIACYWIQSwitmz9CFWcNIRoe4E1uz8Bzrf1QUCZqkx
hgIbDAUJB4YfNQAKCRAE1uz8Bzrf1UN1D/9jrn8KZaLP9SpNijGHckvr1cKo6n1D
7nlxDU4BJ79u7pLaBmqKrrBkPei0nOnNWFIxNiiwJzZee6LrY3Z84pH/DEwlIcO3
l7UlH/XMLtN4bhg0J7UfTOITBXjgSGHme0BHCOyPRxDzAvwyTg3sBrZzlsZsxpvv
wmTT7vZmMUiUVwvb OwxoJUBXHRkLYhm2E3AKFziqZhx PZQ kM7nzWvtkqXrB T
yA1cnOD13Ddap1A 6cbxGQUWP/UdA3FykcFHfrLz4XT/KVRbGSc5xDvCuP/7vve2
PP1vkfGDwQQx7e0EmUQQDv3oLq2kMJhzOLvchgMX6dSAqgS5yYB9g4L/Spt3UfEI
lGMdVtK8KHEcKOkpfQHifdYpbbYWEHbRFTW5W85Ubeb2PzfRAPfDUbA6kBn0IqUe
z8xYtXLfhpcTcIB3dhHAtrIpU7x0JwNtU9FCyxzDmMz9llXou8HZTGIeHyHa7TJ9
NsY3hnZQdAol7QL5IUCHEIMDvwKxrceNGP89q3VVLac2tc2c4Vkd6PubF4f/rdYo
rLkAqv35m3g3WpyTzEE0KYdCAzTx/9ksoA0f04IFUWZ etpU7sue9mEh1Z2JuCYF
YaAi6hSVSN1CQ6604sbwpRQezSatioxM2DNL2ZeOp58fOqlpk9O/FjGyv7WI NIU
OqkBovDnsQbfuw==
=1PP5
-----END PGP PUBLIC KEY BLOCK-----

Bug bounties

Tonic.ai currently does not pay bounties for unsolicited security findings.

Last updated