Trust Center
// product security advisories

Kotav Labs security advisories.

This is the public source for vulnerability advisories affecting products and services owned by Kotav Labs. Each published record will identify affected versions, impact, remediation and any assigned CVE.

Published 19 September 2026
// current advisories

No published advisories.

There are no Kotav Labs product security advisories at this time. We do not publish sample CVEs or placeholder incidents. Confirmed issues will appear here after coordinated triage, with enough detail for customers to act safely.

Report a vulnerability

Read the authorized scope, safe-harbour terms and coordinated disclosure process before testing or reporting.

Disclosure policy

Security contact

Send the affected service, reproduction steps, impact and redacted evidence. We target acknowledgement within three business days.

m.tavares@kotavlabs.com
Cloud Security Alliance AI Trustworthy Pledge 2026Kotav Labs STAR Level 1 self-assessment in the CSA STAR RegistryKotav Labs STAR for AI Level 1 self-assessment in the CSA STAR RegistryKotav Labs featured in the Cloud Security Alliance Startup ShowcaseGreen Web Foundation verified green hosting for kotavlabs.com
Kotav Labs internal ISO/IEC 27001:2022 ISMS programme statusKotav Labs ISO/IEC 42001:2023 internal implementation complete — independent certification pendingKotav Labs ISO 22301 internal BCMS implementation complete — independent certification pendingKotav Labs SOC 2 control baseline implemented — independent Type II report pendingKotav Labs internal NIS2 implementation statusKotav Labs DORA ICT supplier controls implementedKotav Labs EU Cyber Resilience Act product security controls implementedKotav Labs NIST SP 800-115 and PTES assessment method implementedKotav Labs internal QNRCS self-assessment statusKotav Labs internal CIS Controls 8.1 self-assessment statusKotav Labs internal NIST CSF and AI RMF framework statusKotav Labs internal OWASP ASVS and SAMM methodology status
Plano de Recuperação e Resiliência, República Portuguesa e Financiado pela União Europeia — NextGenerationEU