Disclosure SLA public

Evidence summary #

The ooosec.com program page lists a response commitment of ~2 days 6 hours and triage of ~1 day 12 hours, functioning as informal SLA. No formally published acknowledgment-time SLA in a public policy document. 00-profile.md records a '24 hours committed response.' Yellow = SLA exists at platform level but not independently published or documented with adherence evidence.

Sources #

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →