Response Window
Forge targets acknowledgment within one business day and initial triage within three business days.
Forge Orbital Security
Security reporting for Forge Orbital
Use this page to report a suspected vulnerability, review coordinated-disclosure rules, and check public advisory status.
Disclosure Target
Forge targets remediation of confirmed vulnerabilities within 90 days of triage, and coordinated public disclosure promptly after remediation.
Advisory Status
No public security advisories have been published.
How to Report
- Form
- /security/report
- security@forgeorbital.com
- Follow-up
- Coordinated after triage when sensitive proof is required.
Confirming the Intake Path
Forge publishes a standard security discovery file and an advisory index so customer security teams and researchers have a stable place to confirm the intake path.
- security.txt
- /.well-known/security.txt
- Policy
- Responsible disclosure policy
- Advisories
- Public advisory index
Before You Submit
Include
- Affected URL, endpoint, version, or artifact.
- Clear reproduction steps and observed impact.
- Minimal proof needed for triage.
- Your disclosure-credit preference.
Do Not Include or Attempt
- Customer data, classified material, export-controlled material, or credentials.
- High-volume testing, persistence, exfiltration, or destructive proof.
- Details from third-party systems unless authorized by that third party and Forge.