Kraken Tech Security Vulnerability Disclosure Program

Introduction

We're committed to the security of our business and customers. We value close collaboration with the security community, suppliers, and partners to flag potential security vulnerabilities in the Kraken ecosystem.

Program Highlights

Open Scope Accepts reports for all owned assets based on impact, even if not listed in scope.

Gold Standard Safe Harbor Adheres to Gold Standard Safe Harbor.

Coordinated Vulnerability Disclosure Follows Coordinated Vulnerability Disclosure Standard.

Top Response Efficiency This program's response efficiency is above 90%.

Response Metrics

• Average time to first response: 9 hours
• Average time to triage: 1 day, 7 hours

Overview

Kraken Technologies is an end-to-end platform for utilities. It sits in, but operates independently from, the Octopus Energy Group. Our platform manages millions of customer accounts on behalf of our clients and our product aims to increase product innovation in the utilities space.

For details of our Vulnerability Disclosure Policy and reporting process, please visit: https://kraken.tech/vulnerability-disclosure-process

Scope Exclusions

Core Ineligible Findings are out of scope.

---