Security at Pentrail

A security company should be easy to report problems to.

Reporting a vulnerability

Write to security@pentrail.thetowers.ai with what you found and how to reproduce it. We’ll answer within three business days. Please don’t access other customers’ reports, run denial-of-service tests or use automated scanners against our checkout. Good-faith research within these lines is welcome, and we won’t pursue it.

How we protect reports

  • Each report is reachable only through a long random link; there are no guessable IDs.
  • Secrets found during a test are redacted before they’re stored.
  • The scanner refuses private and internal addresses and re-checks every redirect, so it can’t be turned against our own network.