11x · Vulnerability Disclosure

11X Vulnerability Disclosure

Vulnerability disclosure

11x publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyArtificial IntelligenceAI AgentsSalesSales AutomationLead GenerationConversational AIVoiceCRMGo-To-Market

Program: security.txt present

Disclosure Policy

Policy

https://www.11x.ai/security/disclosure

Security Contact

Contact

mailto:security@11x.ai

Source

Vulnerability Disclosure

generated: '2026-08-05'
method: searched
probe: true
source: https://www.11x.ai/security/disclosure
policy:
- https://www.11x.ai/security/disclosure
contact:
- mailto:security@11x.ai
program:
  name: 11x Responsible Disclosure & Bug Bounty Policy
  type: self-hosted
  platform: null
  rewards: true
  reward_range: >-
    USD 100 to several thousand, discretionary, scaled by severity, impact, exploitability and
    report quality.
  safe_harbor: true
  hall_of_fame: true
  first_reporter_only: true
sla:
  acknowledgement: 2 business days
  status_update: 10 business days
  disclosure_window: 90 days before public disclosure
scope:
  in:
  - '*.11x.ai (web properties and APIs)'
  - Alice and Julian applications and associated customer dashboards
  - authentication and authorization flaws
  - data isolation and multi-tenant boundary issues
  - vulnerabilities exposing customer data or enabling account takeover
  out:
  - denial-of-service, volumetric or load testing
  - social engineering of employees, customers or vendors
  - physical attacks or attacks requiring physical device access
  - third-party service issues without demonstrated impact on 11x systems
  - automated scanner findings without demonstrated impact
  - missing security headers or cookie flags without demonstrable impact
  - rate-limiting issues without demonstrated abuse impact
  - self-XSS or issues requiring an already-compromised browser
  - email spoofing / SPF-DKIM-DMARC issues without an exploitable path
evidence:
- source: well-known/11x-security.txt
  kind: security.txt
  fields: [Contact, Expires, Canonical, Preferred-Languages, Policy]
- source: https://www.11x.ai/security/disclosure
  kind: disclosure-policy
  http_status: 200
  note: >-
    301-redirects to a Webflow-hosted plain-text asset under cdn.prod.website-files.com, which is
    where the full policy text is actually served.
- source: https://trust.11x.ai/
  kind: trust-center-disclosure-invitation
x-evidence:
  fetched: '2026-08-05'
  security_txt_expires: '2027-04-24T00:00:00Z'

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/11x-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.