Help us keep Red Eagle Tech secure - responsibly
Every company says they take security very seriously, but at Red Eagle Tech, we're about actions not words. So judge for yourself.
We know that no system is perfect. If you've discovered a potential security issue, we want to hear from you right away.
Our VDP covers all Red Eagle Tech properties and services:
Not all our properties are listed here - some are bespoke client solutions, so we don't publicise them here. But they're all clearly identified as 'powered by Red Eagle Tech', so if you see our name, it's in scope.
Researchers that are keen to work with us and establish a trusted relationship are welcome to request a full list of properties and we can even help out with test environments. Our test environment architecture and code exactly mirrors production, whilst being free from sensitive data.
Spotted something that needs fixing? High five! Here's how to let us know:
Please include:
Use our PGP public key
Fingerprint: C5AB 412E 4CAE 4CE3 ECB1 F9C9 E32E F95C 43A3 1BBD
Occasionally we might miss an email - sorry - we're human. If you haven't heard back, please give us a friendly nudge.
We want you to feel safe reporting issues to us. Crystal clear:
No threatening letters, no lawyers, just gratitude. Scout's honour.
If someone else gives you grief about your research (as long as you followed our rules), we'll confirm you had our permission. We've got your back.
Of course, deliberately malicious or exceptionally dumb actions aren't covered. But we know you're one of the good ones... so this doesn't apply to you does it.
We're a startup with big security ambitions but modest budgets. While we can't offer massive bounties (yet!), we absolutely value your contributions:
Valid findings earn you a permanent spot
Red Eagle Tech goodies as a thank you
Possible MeldEagle subscription credits
For critical findings, we may surprise you
Regardless of rewards, you'll always have our sincere gratitude and respect.
Researchers who reported a valid finding and worked with us while we fixed it. Thank you.
Founder of SeveraDAO Security LLC, specialising in web application and API security testing and responsible vulnerability disclosure.
Reported September 2026 · Session management - sessions not ended on a password reset (Medium), and recovery-code regeneration without step-up (Low)
Cybersecurity researcher focused on web application security and ethical vulnerability disclosure.
Reported September 2026 · Session management - other sessions not ended on a password change (Medium)
Cybersecurity Researcher
Reported July 2026 · Authentication hardening - login brute-force protection (Low)
Entries are added once the fix is live and with the researcher's consent. Informational reports and best-practice suggestions without demonstrable impact don't qualify.
Need clarification on anything? Drop us a line at security@redeagle.tech
We're friendly, we promise. Happy hunting!
Book a free discovery call or send us a message. We'll respond within 2 business hours.
A friendly 15-minute video call with Kat to understand your needs. No preparation needed.
Kat Korson
Founder & Technical Director
Our team has 10+ years delivering software solutions for growing businesses across the UK.
Your information is secure. See our privacy policy.
