security at ezo labs.
security lead, scope, and vulnerability reporting.
security lead
anthony uckun, ceo and security lead.
what runs
-
superbot security
finds security issues and notifies the system owner.
-
always-on defense
defensive agents for enterprise systems.
-
agent-to-agent defense
defensive products for agent systems.
report a vulnerability
found a vulnerability? email us with steps to reproduce.
security@ezolabs.iowe review reports, coordinate fixes, and credit researchers on request.
good-faith research in scope is welcome. we will not pursue researchers who stay in scope and give us time to fix it.
recent disclosures
public dependency advisories we acted on, sent upstream as pull requests.
- superglue-ai/superglue#703 next 16.2.9 to 16.4.1 open evidence: artifact-measured
- ItzCrazyKns/Vane#1215 next 16.2.2 to 16.4.1 closed unmerged evidence: artifact-measured
- vas3k/TaxHacker#195 sharp 0.35.3 to 0.35.5 closed unmerged evidence: executed
creation dates are when each pull request was opened, in utc. states were checked on 2026-10-25 utc. evidence is the method used to show a finding, not its severity.
scope
ezolabs.io, superbot.gg, and their APIs.
superbot desktop and mobile apps.
our agent services and routing.
key facts
- security lead
- anthony uckun, ceo
- contact
- security@ezolabs.io
- scope
- ezolabs.io, superbot.gg, the superbot apps, our agent services
- disclosure
- coordinated, credit on request
- reviewed
- october 2026