No personal gain
Last updated: Nov 3, 2026
Fluid Attacks requires all employees to keep all client information, including vulnerability reports, fully confidential and with integrity. Employees must not do actions that can compromise the security or privacy of the client. For example, employees must not use the vulnerabilities that Fluid Attacks finds for unauthorized access, personal gain, or other personal purposes.
Other confidentiality measures
Logical data separation
Fluid Attacks enforces logical data separation between clients at both the database and application authorization layers.
Personnel NDA
To ensure the security of client information, Fluid Attacks requires all new talent to sign a publicly available non-disclosure agreement (NDA).