Vulnerability Disclosure Policy

How to report an issue

If you believe you have discovered a security issue or bug with the in-scope assets listed below, please send an email to security@runway.team with the following details:

• A summary of the issue or bug and its potential impact
• Steps that can be followed to reproduce the issue or bug
• Details about the environment you’re using (e.g. web browser type and version)

Once our team has received your email, we will initiate an investigation and will keep you updated on its progress. We may reach out asking for further context if needed.

Safe harbor

Any activities conducted in a manner consistent with this policy and in good faith will be considered authorized conduct and we will not initiate legal action against you. If legal action is initiated by a third party against you in connection with activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.

Assets in scope

• https://www.runway.team
• https://api.runway.team
• https://app.runway.team