Skip to main content
PathMon

Hall of fame

Security Acknowledgements

PatchMon is safer because of the researchers below. Thank you to everyone who has responsibly disclosed a finding to us under our Vulnerability Disclosure Policy. If you believe you have found a security issue, we would like to hear from you: our reporting guide explains how to get in touch.

  • Stefanotr

    Credited for a responsible disclosure relating to hardening of the Windows agent, covering local credential exposure and privilege-escalation concerns.

  • Char0n1507 (Sri Charan Pedhiti)

    Credited for a responsible disclosure relating to SSH host-key verification and server-side request forgery, across the SSH proxy and notification webhooks.

  • Xample33

    Credited for a responsible disclosure relating to a stored cross-site scripting issue in SVG branding uploads.

  • radiantwave

    Credited for a responsible disclosure relating to a trust-boundary issue in our CI/CD workflows.

  • menci725

    Credited for a responsible disclosure relating to an approval-label reuse issue in our CI/CD workflows.

How to get credited

Report a valid issue through security@patchmon.net, tell us whether you consent to public credit, and how you would like to be listed (name, handle, affiliation, optional link). We update this page after remediation.