§ Contact · Scope · Disclosure · About

Get in touch.

One form, four reasons to use it. Vulnerability reports, consulting, testing, or anything else: they all land in the same inbox behind PGP, and one of the senior team replies inside two business days.

Contact form Email & PGP Responsible disclosure About SecLeap

§ 01 · Write to us

Pick a reason. Write.

PGP · client-side · verifiable

01 · testing Scope a test Pentest, AI red team, or red team. 02 · consulting Consulting & training Workshops, advisory, secure-coding. 03 · disclosure Report something you found On our surface. Safe harbor. 04 · other Something else Press, career, general.

Name

Company

Type of test

Company

What do you need

Affected surface

Est. severity

Topic

Organization (optional)

Message

Public key · 219F 7C79 Reply inside two business days: a short call, or a pointer somewhere better. Reply inside two business days. We'll send a short proposal, not a deck. Good-faith research inside our /security.txt scope is safe-harbored. Answered by a person, not a funnel.

Checking local encryption availability…

Encryption happens in your browser. Your email application handles sending; nothing is submitted by this form. Details

§ 02

Reach us directly.

no forms required

Email hello [at] secleap.ch Monitored by the senior team. Two business days to a human reply.

PGP fingerprint 30E6 2B95 C180 47FC D7AC
7EA6 EF1F 8735 219F 7C79 Full key OpenPGP

Region Switzerland and Europe Remote-first. On-site where the scope requires it.

§ 03

Responsible disclosure.

for reports about us

Tell us about a vulnerability in our public surface.

/security.txt · RFC 9116

If you have found a security issue in a SecLeap site, tool, or published artifact, we want to hear from you. Use the PGP key above and send to security [at] secleap.ch. Or pick the Report a vulnerability tab in the form above: same inbox, same handling.

Safe harbor. Good-faith research within the scope stated at /.well-known/security.txt will not lead to legal action from us. Out-of-scope or destructive testing is not safe-harbored; if in doubt, write first.

Credit. We reply within two business days and credit researchers who want credit.

§ 04

About SecLeap.

facts · not pitch

A small, senior-led offensive-security firm.

Switzerland and Europe

Senior-led means senior-delivered. The person who scopes the work is on the engagement. No re-assignment to juniors after signature.

Half our surface is public. The research, Learn library, and open-source tooling are not a marketing budget. They are how we stay sharp. The other half stays between us and our clients.

We say no. If the work we're being asked to do doesn't fit, we say so in the first call and point you to a firm that fits better.

Legal entity: SecLeap GmbH · registered in Switzerland
Founded: 2026
Team size: Senior-led · small by design
Working languages: EN · FR · DE