If you need to contact Uptycs about a potential security issue with our product or services, please email security@uptycs.com with the words “Security Concern” in the subject line.

  • We will acknowledge receiving the information within 3 business days.
  • We will do our best to keep you up to date. If you would like an update or more details regarding your disclosure please do not hesitate to reach back out.
  • We will never use the contact information acquired via you sending us information about a security concern for any other purpose than to communicate about this issue, unless you explicitly request that we contact you for other purposes.

This is not a bug bounty program, rather a simple way to allow people who have found potential issues to report them securely.

Uptycs leverages the power of osquery. Bugs found in the open source version of osquery are covered by the Facebook bug bounty. If you have found issues in osquery itself, we appreciate receiving reports and your work to help secure users of open source security tools, and we encourage you to participate in the official bounty. Be aware that if you report an issue to us, we may start working on a fix, and the timing could prevent you from receiving the bounty, so for that reason we recommend you submit there first.

If you are a customer and want to inquire about authorized security testing, please get in touch with your customer success manager.

Reporting A Security Concern

Please report issues to: security@uptycs.com.

If you are reporting a sensitive vulnerability or information, we recommend that you use PGP/GPG to encrypt the content of your email.

If you contact us via an encrypted message, we will not reply with any content of your email in clear-text. If you provide a public key, we will reply using it. If you do not provide a public key, we will not respond with any details that could expose what has been reported, we will simply acknowledge receiving it and we will sign the message.

Our PGP Key can be found on this page, as well as on the MIT PGP Key Server.

This is the Uptycs Product Security PGP Key, Valid until January 1st, 2020.
  • Key Size: 4096
  • Fingerprint: FD43B42AF0631C7F6207FCACFA0CBC344553B573

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBFwajJMBEADbVi2QO4MHMT4IBL3zeeKsFComXzS1DbiE7Vn9Hhs3J/yGSfF6

RspwCGCNKTf5H5i9QI4K3yGbE8XMEATlC3Z9Voq/1c4X3yIVEbVUCCgcWBV+qgTj

L3oVIsbXfb3CU06fnLTbC/myInIEti/sEdB6TciXJRg85Ww4SPdGJjg4KZ+D5MgY

NHLqloiVkwqMrPmQhaUqjNfJoELOVzVNbxImywL3KWq0Ar1RKx5j1l2sE/rU2/a+

XeBJivec/9jMe54FrXXxFSbPRhcPKjD2aTXWHhpWaskvJXOjQjm2Ynl3SVzceiYM

cjs3NzgpTrgIFzGIt9KW+nOEPp53S1CxeftigUhOypftNlpHUfX3XgnrqMAkAqZ1

CIlD+OOkgxyn2VYi88Ib5WozCFYBtbsxovKtTCww3fd2s8EEAu8fIDSFJQIZwA3w

AggsdoM4YLGOt5/bsDr/N5us5zJ2v9+ZcmUYOCN633TC8oAZu84iF8wM7HaLpegq

gAlVL9SMzzCpT1bHo9VQt5N1MxR0mZxl1OkD+c6if+S84YxOCPCUwcw3KqSOsEHh

SuMxvgpjcsuCPjnpfizSs156WSQNlK7TTMgYRn28datrzYbgxZ+X+JtVrp6Gmmwn

IqgeMM3T2WizMPKgk1T3ejjfYrpEc3DcYMQbBbGiydUDwGdW4eRQx61+jwARAQAB

tIlVcHR5Y3MgU2VjdXJpdHkgKFVwdHljcyBTZWN1cml0eSAtIFVzZSB0aGlzIHRv

IGVuY3J5cHQgdnVsbmVyYWJpbGl0eSByZXBvcnRzLiBDYW4gYWxzbyBiZSB1c2Vk

IHRvIHNpZ24gYWR2aXNvcmllcy4pIDxzZWN1cml0eUB1cHR5Y3MuY29tPokCVAQT

AQgAPhYhBP1DtCrwYxx/Ygf8rPoMvDRFU7VzBQJcGoyTAhsDBQkB8lcABQsJCAcC

BhUKCQgLAgQWAgMBAh4BAheAAAoJEPoMvDRFU7VzrwQP/0LCYOridX4f0cTwiqc3

wg/fXLtJo1E0v6quO/9tghzWx/jKCPzhSD6IMupjMg9qvXo//05Fp4Ydm3O2jnby

0oscNNnDh7WjSiKFZjhNP/Xw+nr8/1eSS4lLsTJrINXu5h4dQ+ZTzS2oqXSA2hrt

TcdpWXBPD0k/4yEsXAQHsDjf16O4bylp6haykutPzKRZ/3jvwVEgA2NFec0xyDaS

ru1/lZapAcN8XDGZmWuHSfXb8PT0KSbcll1VxszrRIR+D8XSqAuQxbmZ5EqJ/cTq

lmMFGVpidHR0HQ3tb7JGZxhl4SIRtQYsPIBbST4cHySKJQfdhhIcZilVbLmrr3de

rX8aqZkTIRtSj5Vsh+labgLYDyfP/rTU+KLuTuNSAicrM/QIKXa5y+lpyk3hgNyH

WLqZJXA2utuESsH/Jrkxjouyc0IM28jH+pv2fdWXFWj4i4p3m912OhO9hGTDKzMU

QLT2P7hkxoq8FONu8Coift27t2gUZpcLQHH9H86y/XXOEOfQxMjsCXFL/5VAfztm

RQvPcc85nU1KVhSVMcr6ffZptbfJZAeNSsdTVszdDD6XLHtsHCygqkuUChYmAXpc

wt5wjQ/UyDo0xkpymBk01KJDScnW7d+CxqpPERcNkVTbEFw9BbltjtC0B7KwTARH

nSUieMZGfE4SZUjzk+fwWqR1uQINBFwajJMBEADgC5YZFpboscVFbXvkEeuhc1Ps

vc2HuK50d8Qv+S+LCdAIPVK63ntBhkIAFZ9OTXSYBqWAN4jGQbZg98R2PsU82c+E

7GIe/yHfvrtfKWxq/n5C8jBpav3NcPmG/mT41BUIKIYL2ddyW4GMB9Pbb+m4htv3

TuDHApjkRoEEh8V9nLv18VIOWkgwgHs46/Mn8LjgzMvQD6tsDdvu41Z3qOxwTBKN

t56PFQ3QLotKFqFiOzLpTA8jVIgC9Au7q76j6gj5xkON8EfdAkWTH5NaECcO7tWa

/5Oo6gH22Qk7GOg7OdLO0Hy/FL/rdJ5bxrzC0K5sbqbPdybNQ43kK1kWy+0rm5+1

s6MT6n0+hA+i4+OOjqyMBtA5FQVQkiCaIf4fra4QS3p3Q7Msm/nIq2DCskV8fs2f

7JCpqftdPcaQVf4kYP0v4VBN5t+lu/dPqPPiosf0ei8P+N3r2Efrc+s4Tza/Q6Dj

mkRx1Po2R2F0KwqTEenvqYIfhhiUkPPpz4USDjxL6W97PKD90QgCUSODcPSygaMb

zMd9QBKxnQQsKKGk46NJ+QZdeVYnBvafgR3tcn7uKz5fZiVzVZcDutUSqEi+G+3O

Gwd+mJ2M4l0fJLPFSrw+hgtYlTxvJFjaHulloqNhcBIcWHWXIgJvn04DrgGEAVlS

kpydEzyemyTM4ic9tQARAQABiQI8BBgBCAAmFiEE/UO0KvBjHH9iB/ys+gy8NEVT

tXMFAlwajJMCGwwFCQHyVwAACgkQ+gy8NEVTtXPbzg//UWkmJyZfaBRPK0sSw7+w

TddRw8gp9YkuKLZpKI/lg//Upkt4IA1PY2Lx5rtK/gzx8C+usTc7FxWQiM6KSvOR

BPtXUEOqucXn24AdoA3a/L54AQDeHmfO4K5ygrWhn5vqrfQCzDFr7wtXYPsC9QXu

7Ez936izHE5hWcTVaLMjfbP8jdnjUXSMLOWi10pP/BFFMaqI+cJoxbl4TrY0huHU

vFO2YPkco6jIZkdtOCzGgBKw22kyv2oA3cAC348FMMeSx85ZcJ2phiHi4qLYOD5L

THW/nSXJY1Ij3rB3l4MX79vF9kvcbn5fvuRuxkK0mSlE0jGhAod3EmfGtCskMqgg

ugwffP9YV2GkdE+jzSwJuX/8TOrKzJQwVfDt+K9mdzturZzDdESn5tBi26s/LPin

BZlJ1MCWgdM6lBcgq2HiFWfPTxcfWxtXBKI0wV5K/r2yma65CCgXRWmRh3hmgjqh

IenJ/LG0dN347O4jGQu5REMKt3h1QEFVkiDHQpbLd7mpUkUkAnQgK5gTUysHVEnm

1mPyStaGbzjpGVBgZsdpKNilq1xlttpziqAyRc05qLNEb8QkuB3GO5JpvtrTbl2j

0wNrhxkiGgO7ZMMIZtUGe5riz3l8p9hQ0zClrw+gb2quMsDqKWQzWitLnTXWjChG

Rrnls4vPTe3QsihUY4qk3FU=

=E2gN

-----END PGP PUBLIC KEY BLOCK-----