Three addresses, three purposes.
Every Veyra inbox is a real inbox monitored by a named person. Engagement requests prefer the dedicated channel; security disclosures should use the encrypted one. The general inbox is for everything else.
Describe a system you want assessed.
engage@veyrasecurity.ioRead by Parker. The dedicated channel for new and existing engagements. Reply within one business day. Use this address for SOW, ATT, and ROE correspondence after countersignature.
Press, partner, or non-engagement.
hello@veyrasecurity.ioRead by Parker. Press, partnership inquiries, sample-report follow-ups, and anything that does not fit the engagement or security inboxes. Same response cadence.
Issues affecting Veyra infrastructure.
security@veyrasecurity.ioReports of security issues affecting Veyra infrastructure. Acknowledgement within one business day; coordinated disclosure is the default. PGP key below.
The legal entity behind Veyra Security.
PGP key for security@veyrasecurity.io
Submissions encrypted to this key are received by the Veyra security team. The fingerprint is published so a reporter can verify the key out-of-band before sending sensitive material.
fpr A7F3 2B4D 8E1C 9F0A 5D6B 4F2A 9C8E 1B6D 3A7F
uid Veyra Security <security@veyrasecurity.io>
sub cv25519/0x9D4B7E2A6C1F8B0D · 2026-02-12 [E]