What we collect, why, and how to control it.

Who we are

Vulnerability Research Labs (VRL) is a research unit of Quantro Security, in partnership with Loginsoft. This policy covers vulnerabilityresearchlabs.ai. Questions: privacy@vulnerabilityresearchlabs.ai.

Cookies & analytics

We use cookies and similar technologies only for analytics, and only after you accept them via our cookie banner. Until you accept, no analytics or tracking scripts load. You can decline and the site works the same.

What loads after you accept

• Google Analytics 4 (GA4) for aggregate traffic measurement: pages viewed, approximate location, device and browser. We use it to understand usage and improve the site.
• Leadfeeder (Dealfront), which identifies the organizations (not individuals) that visit, from IP-based company data, so we can understand which sectors engage with the research.

Your choices

Accept or Decline via the cookie banner on your first visit; your choice is remembered in your browser. To change it, clear this site's cookies/local storage in your browser and reload. You can also use browser controls or extensions to block analytics at any time.

Forms you submit

If you submit a CVE (ai-xi), request a scan (ai-recon), or contact us, we process the details you provide (e.g. a CVE id, a domain, an email address) to fulfil that request. We do not sell personal data.

Subscribing to updates

If you subscribe, we store your email address (and name, if given) to send you research and product updates. You consent to this when you subscribe, and can unsubscribe at any time via the link in any email or by contacting us. We record your subscription in our backend and in HubSpot, our CRM, which processes it under its own terms. We do not sell personal data.

Data we publish

Our research is released TLP:CLEAR and concerns already-public CVEs. We publish measurements and findings, never working exploit code or proof-of-concepts.

Third parties

Analytics data is processed by Google (GA4) and Dealfront (Leadfeeder) under their own terms. Submissions are processed by our backend (Quantro/VRL infrastructure); ai-recon scans are handled via the Quantro free-scan service.

Changes

We may update this policy as the site evolves; material changes will be reflected here.