We run a security bug bounty program with HackerOne. See the Tlon Corp page at HackerOne for more information.
If you've found a vulnerablity, and you'd like to claim a bounty, please submit a report there. Note that our bounty program is currently focused on Azimuth vulnerabilities.
For general inquiries and disclosures, please contact our security team at firstname.lastname@example.org.