Slideflow Labs Vulnerability Disclosure Policy

Last updated: November 9, 2026

We want to hear about security vulnerabilities in Slideflow products and services, including our website at slideflow.ai and our customer portal at app.slideflow.ai. This page explains how to report one and what to expect from us.

How to report a vulnerability

Email security@slideflow.ai. Please do not share details of the vulnerability publicly until we have fixed it.

What to include

• A description of the vulnerability and where you found it, such as a URL or component.
• Steps to reproduce it, with any proof-of-concept code or screenshots.
• The impact you think it could have.
• How we can reach you with follow-up questions.

How fast we respond

We acknowledge reports within 3 business days and follow up with you as we assess and fix the issue.

Testing that is off limits

When you look for vulnerabilities, do not:

• Run denial-of-service tests or anything else that degrades our services.
• Use social engineering, such as phishing our staff or customers.
• Access, change or delete data that is not yours.
• Run high-volume automated scans.

If you come across patient data or other personal information, stop testing, do not save or share it, and report it to us right away.

Rewards

We do not run a bug bounty program and do not pay for reports. Thank you for helping us keep Slideflow secure.