Security Policy

Trust & Reliability

We treat security as a first-class architectural constraint. Our research infrastructure is built on private-by-default networking and zero-trust principles.

Responsible Disclosure

If you believe you have found a security vulnerability in catincloudlabs.com or our simulation infrastructure, we encourage you to let us know right away. We will investigate all legitimate reports and do our best to quickly fix the problem.

Reporting a Vulnerability

Please email dave@catincloudlabs.com with the subject line [SECURITY]. Include a proof of concept or steps to reproduce the vulnerability.

Research Collaboration

We do not operate a cash bug bounty program. However, we are open to research collaboration on market microstructure security and algorithmic safety. If you are a researcher in this field, we'd love to talk.

Data & Privacy

Our Privacy Policy explains how we handle personal data. We avoid unnecessary collection and do not use advertising trackers.

Canonical Source

For machine-readable contact details and policy expiration, please refer to our security.txt.