I’m trying to find the best way to disclose vulnerabilities to gogo inflight. They are critical in nature. I thought they had a bugcrowd bug bounty program at one time: Gogo Aims to Improve Airline WiFi Security with Bug Bounty Program
Might now depend on whether you found the issue on a commercial or business jet. I believe gogo commercial aircraft is now Inmarsat, whilst gogo is now just business jet.
Either way - try the aviation isac as mentioned here
Thanks for that link. I left a request there!
This was on a delta flight.