Security
Responsible disclosure
A monitored responsible-disclosure channel and response policy have not yet been published. Do not send exploit details, credentials, setup codes, private keys, customer data, or raw diagnostic captures to an unverified address claiming to represent GulpLink.
The verified reporting channel, acknowledgement target, safe-harbor language, scope, and escalation process must be published before external service launch.