Void Relic
Independent security research team
Security contact: security@voidrelic.org
PGP available on request. Please include impact, reproduction steps and evidence.
What we do
- Security review of GPU cloud and AI inference platforms
- Mobile application security (Android / iOS)
- Web application and API security assessment
- Responsible, coordinated disclosure
How we work
Every finding is documented with timestamps and reproducible evidence. We report through the
channel each vendor designates, and we follow a coordinated disclosure process: we contact the
vendor first and only publish after a reasonable remediation window has passed.
Disclosure policy
- We contact the vendor before any public disclosure.
- Default remediation window: 90 days (extendable on request).
- We do not access, modify or retain customer data.
- We do not test against production user accounts.
Contact
Email: security@voidrelic.org
A machine-readable policy is published at /.well-known/security.txt