Bug bounty & vulnerability disclosure
Help secure the data behind Physical AI.
Research vulnerabilities in Avala's robotics and autonomous-vehicle data platform. Report your findings privately, follow the response, and receive credit and rewards for eligible work.
Rewards
Impact determines the reward.
Severity bands provide a starting point. The affected surface, demonstrated impact, and program eligibility determine the bounty.
All reward details- Informational / LowCVSS v3.1: < 4.0
- No cash reward
- MediumCVSS v3.1: 4.0 – 6.9
- $50 – $100
- HighCVSS v3.1: 7.0 – 8.9
- $150 – $300
- CriticalCVSS v3.1: 9.0 – 10.0
- $300 – $750
- Exceptional chain / broad impactCVSS v3.1: —
- Discretionary bonus
After you report
A clear path from report to resolution.
Use your private report thread to answer questions, share evidence, and follow status updates. These are the program's response targets.
Response and disclosure terms- Initial acknowledgment
- Within 48 hours
- Severity assessment & triage
- Within 5 business days
- Status update cadence
- Every 7 days until resolved
Start a report
Found a vulnerability?
Sign in with your email to submit a report and keep the conversation with our security team in one place.