Perplexity
- Type
- AI company
- Place
- United States — USA
- Last checked
- 2026-09-22
- Next check due
- 2027-03-21
Ways to reach them
- Vulnerability Disclosure Program (Bugcrowd)
- Support — including what they classify as safety issues
- Privacy and data concerns
- Homepage
- No published safety framework; Vulnerability Disclosure Program is the governing document
What it does
No publicly named safety or alignment function. A security team runs the VDP; support handles what Perplexity calls 'safety issues' at the account level.
Honest assessment
The Comet browser has been a repeated target of serious external security research — Hacktron's one-click UXSS and Brave's prompt-injection findings — and those were handled through the security program, which does function. But model safety is formally excluded from it, and the fallback is a general support inbox. No safe-harbour language is published on the VDP page: it asks researchers to 'avoid actions that could compromise the privacy of our users' but offers no legal protection in return.
Notes
If it is a security bug, Bugcrowd works. If it is a model-behaviour or hallucination harm, Perplexity has told you in writing it is out of scope, and support@ is your only option. Note the absence of safe harbour before doing any testing.