Adelphic Mobile Vulnerability Disclosure

generated: '2026-08-12'
method: searched
probe: true
source: https://www.viantinc.com/company/security/
ownership_note: >-
  Adelphic is Viant Technology's demand-side platform (acquired 2017) and has no
  independent corporate site — adelphic.com is a redirect shell. Viant's
  security page is the disclosure policy that governs the Adelphic DSP and the
  api.adelphic.com host, and it states it covers "Viant and its affiliates".
policy:
- https://www.viantinc.com/company/security/
contact:
- noreply-security@viantinc.com
bug_bounty:
  exists: false
  statement: >-
    "Viant and its affiliates do not operate a bug bounty program or offer any
    compensation, including financial rewards, for vulnerability reports."
  platforms: []
testing_policy:
  prior_written_consent_required: true
  statement: >-
    "Any testing done on our websites, applications, or domains must be done
    with Viant or its affiliates' prior written consent."
reporting_instruction: >-
  "If you discover a vulnerability, please notify us at
  noreply-security@viantinc.com"
security_txt:
  published: false
  note: >-
    /.well-known/security.txt returns 404 on adelphic.com, www.adelphic.com,
    www.viantinc.com and help.viantinc.com, and 401 on api.adelphic.com. The
    disclosure policy is HTML-only. NO SecurityTxt pointer is emitted.
evidence:
- source: https://www.viantinc.com/company/security/
  kind: security-policy-page
  http_status: 200
  keywords:
  - vulnerability
  - responsible disclosure
  - bug bounty
  - noreply-security@viantinc.com
- source: https://www.viantinc.com/.well-known/security.txt
  kind: security.txt
  http_status: 404
- source: https://www.adelphic.com/.well-known/security.txt
  kind: security.txt
  http_status: 404