Vulnerability Disclosure

IBM Federal ATOM maintains a publicly discoverable channel for reporting security vulnerabilities and authorizes good-faith security research. Researchers are permitted to investigate and report potential vulnerabilities to us without fear of retaliation. We may request a reasonable disclosure period to allow time for remediation, but we do not require indefinite non-disclosure.