If you need to contact Uptycs about a potential security issue with our product or services, please email security@uptycs.com with the words “Security Concern” in the subject line.

  • We will acknowledge receiving the information within 3 business days.
  • We will do our best to keep you up to date. If you would like an update or more details regarding your disclosure please do not hesitate to reach back out.
  • We will never use the contact information acquired via you sending us information about a security concern for any other purpose than to communicate about this issue, unless you explicitly request that we contact you for other purposes.

This is not a bug bounty program, rather a simple way to allow people who have found potential issues to report them securely.

Uptycs leverages the power of osquery. Bugs found in the open source version of osquery are covered by the Facebook bug bounty . If you have found issues in osquery itself, we appreciate receiving reports and your work to help secure users of open source security tools, and we encourage you to participate in the official bounty. Be aware that if you report an issue to us, we may start working on a fix, and the timing could prevent you from receiving the bounty, so for that reason we recommend you submit there first.

If you are a customer and want to inquire about authorized security testing, please get in touch with your customer success manager.

Reporting A Security Concern

Please report issues to: security@uptycs.com .

If you are reporting a sensitive vulnerability or information, we recommend that you use PGP/GPG to encrypt the content of your email.

If you contact us via an encrypted message, we will not reply with any content of your email in clear-text. If you provide a public key, we will reply using it. If you do not provide a public key, we will not respond with any details that could expose what has been reported, we will simply acknowledge receiving it and we will sign the message.

Our PGP key can be below, as well as on the OpenPGP.org website .

This is the Uptycs Security PGP key, valid until January 1st, 2022.
  • Key Size: 4096
  • Fingerprint: 1E600ACB6590E4D3AA463E90F154C3E8D2349862

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBF38+KkBEACuvpKShcMJWSPqEOHalDfPNkiNIq0DbkPWU4FaBR4l6NnipFQs

9AcglCvSPdjrIyDkL2/3+wwo71M3Ourdo7hKWfNOisgI1pkrRsPXwZSumDydsiRv

aRU+i0+xdtBvjv0T7CNim6FswX874c7scgHfeoL4fPxgMlS1rD/8tN+1m1VJ2PQl

2opZFr3iQxCDUBKlM/XlxZpV0VwjAbUsbG1beVqiTY/TddVjtT0bmdfJU7OiMSxv

s8FL+meqmYDR9v7QRF5/K6xmHgUI6C3/NHxqZo/iBvRoV68+nFIRN+jsnDvdjlSv

JG4x+G4QI2DPWYdIB/ltrr5zPyBpRb/fMIH9C5o3BVzbDbNLHfs9mN/Nui5OXAWj

S/XBAWKU9RmlbLL5ODVUmyGaQMrTLkuxk8xGLGoLjO6olf/6otg8XV1E6rtPeT9j

iQyiDihSXlh5nT6LdpRYFR+OifxDVMXpwI6d2f9brFZIwd5tjvxIh7ReIJRAydMW

n2bKgjosflQ/pWeTqh9RXNfKlMWCszFQTOqvmWKpwSVqXiWrtqesWATueXCEXqq2

nucrrKUM5HDlOq8s3C0INKW+pBqSU8iBTrstnzf67CulvIsFiQdbWYa7jj8C56BP

0MTHXdTOVRb5uM8OCm9QCpRvAGLNJx8I7SO4/WnkBajoKT+/lvK1+sAeRwARAQAB

tCVVcHR5Y3MgU2VjdXJpdHkgPHNlY3VyaXR5QHVwdHljcy5jb20+iQJUBBMBCAA+

FiEEHmAKy2WQ5NOqRj6Q8VTD6NI0mGIFAl38+KkCGwMFCQPTioAFCwkIBwIGFQoJ

CAsCBBYCAwECHgECF4AACgkQ8VTD6NI0mGJo+A//XQg7HXObOln/+YnEr+H5rdga

EIcIzgctBiSF6XkSVQ6HQTnogJLfJCT08VcQm8ekk4qOrd77wjKtTwdN4WI5FsFK

oCr7mBmY+XE89xHwZPojbK0RvzvpYd8mCkCAzv7jzjH5Si2LM/dXxK9U5WHsnvmU

9huOR13wRwS4+Z6yqyZEk6otoNjGH3GOO8ZT2Tq0rCM4LI36F1ASfN2lCBCuHE83

/l/j9xZb4puRjBf0P1Nw4lfWJr+YUe4oHnvaRWEUg1SnTqlv+3ui+DiG0Fv0tKJx

YpPvw9UmDEvLPVxzWFTfVBiN2TDufY4+foolSE6swx149u3+ImAG9GgetZw0Qyy3

3zGmgP+3WGHwLSzeOYtTxsvvFzxCiJGXtzWEuVXBMFDgJr8X14vdslVRhWdRV9Rk

tcOzVSsNrgsC76E7JjPXKEsIJbQYeCePBNmJ7y5tK8u/vUckwatYLip5Nr7BjLA/

bB8xEImARjcjONc7nufKYKFFxtZ4qcj7l2zFjBg2LZrMBBeZD6U6keFBXw8WlVfd

5MXXpf4gyJMyBdQG1GKjjIK8W2tYEHgPZNAphvGvCKYAMPreUSG+bdy3bYhFbGsG

1GaqorCVRLveq6fwAyVUAshKw06cv/48FIH5KC7ztIkfjQ8HnCYbfyKicb6EEIv0

S7kkAVsMQoHkiTVk6Wq5Ag0EXfz4qQEQAL/Jhlk1Kq84CFhYwkWj6hsxoONYjP1t

HwxS4B2IQ24qimM6oRI4NtsBy8zTp2bvDPVZ+8qJKq8I1EjZNBt6UeA7Fo2KGaH4

OufXNepuUKtkpV62FPF796xHZXCSzhaROnP+iGt3816DCgIQg0gqTfPPJKabiJJA

Z1DaJw2r+w/sbY2/vLvW4bYY/4T/g1EV+pYEzXu/xfJHFCAqc9K1HZ72PnCk542b

QOg8V8FMS0UgoVzTL+SOGdqEaz6FqRIREu7jp/LkITEOGirndH70EAWo6stPofUd

rwCY5/LyM14LYQX1oBt1n6E7UEvABizrsxlSDFbyTJA4oEBj0CxboiYs+As32xuu

d2e/gkqHnkflW+HuAF6TnkpXuM+ybQbv5UnG6lfJKF51fqo+DYXJYiFhmV+CHxJx

vY1XkXfvup5mwgOEQzlT1T5O8PM1sXucKl3gCygysjbwyfl2JpDvrHW0bDi49bhI

/1wjowPoEvQ7ndU5Fp3ZMFDmV5BaoUMD6NcYnWB4DIO83VkXnOBShq75rjtVSCc4

SQ7VZEbm1ZMOGzUISJJW8KM1ljZcjWp6MFdY2TeypATvWQ758xGObjfFMI4dr+YE

rf6lva//durgGNc+tsmAA4USbF++Tnbr9Vr4cAMu9Q3heocN6tQWVSDUR48va4gG

oDNmUIU52oBHABEBAAGJAjwEGAEIACYWIQQeYArLZZDk06pGPpDxVMPo0jSYYgUC

Xfz4qQIbDAUJA9OKgAAKCRDxVMPo0jSYYtWaD/0ajY9153H86cFMrgPbzsIwjubm

LEVjqZyYa8NUtiKbjxL9jRCa6WeulpXHtJDs+oiKkbP/XrIaa1KkWqFOeZ9QD5y4

1hPsNK/XR6c/5q/gD7o2kBjejdkgG+fDlzRipgrD9fi5oIEn+PSP7KwHO77JJUbo

nR0Z9JRTepkfiwY5CMInoTtcyu8t54rNQRGguiqULYA2zC2PhabUOYwJPKl21ayV

Tqxtk8S1Xo8GU/5v3GHDoMtlnmomEKBZn0cEq994nQ8nb8TDLwqk3XJfQ4cNusWS

+Ty7iFq0agHEu6EvabNLleETh20a75Dl8CFG6fWkk16yBxtL8Kl1NmhAUcUwowRp

XW2OfPggQS03XpF4iLGqwWz0S/gNXIz0lhugCxj1B27T27//xMg/f2L44GxJ2pEt

OFXIFRJcV9YwT6sXswNpC2lIXEKgABWALMtd3iZJnqfLVJ7YrnvMDn1VNwPq/34o

QCyXesFzf7cWveuMIUSq0dISpFc9UWRdL0JIPwEMJkOf8+uVlY/35q5z6g8CD8ia

J4gSIgRhwCYrLoT5Zsq211s7oUMPoGdeIpJZO16o/I0AX0sp8skGaB7RYm4I545v

wAbF/E3xAdmAnfimXIXekccMIbB4fLdgRzjNtLJm7ToQCIr8bVd/DuuyHEU0eR6C

i3Z04JAX0zOYoy1N7g==

=r22K
-----END PGP PUBLIC KEY BLOCK-----