Amboras Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source: https://www.amboras.com/security
url: https://www.amboras.com/security
contact:
- security@amboras.com
bug_bounty: true
bug_bounty_platform: none
policy_page: https://www.amboras.com/security
acknowledgment: within 24 hours
security_txt: false
note: >-
  Amboras publishes a responsible-disclosure invitation and a bug bounty program for eligible
  discoveries on its /security page, with a security@amboras.com contact and a 24-hour
  acknowledgment commitment. The program is self-run - there is no HackerOne, Bugcrowd or
  Intigriti listing - and no scope, safe-harbour language or reward table is published. No
  /.well-known/security.txt is served: re-probed 2026-08-13 and it returns 404 on
  www.amboras.com, api.amboras.com and admin.amboras.com. The policy exists; the
  machine-readable pointer to it (RFC 9116) does not.
incident_process:
- We notify affected users within 72 hours.
- Our security team investigates and contains the incident.
- We provide regular updates throughout the resolution process.
- Post-incident analysis and preventive measures are implemented.
evidence:
- source: https://www.amboras.com/security
  kind: disclosure page
  http_status: 200
  keywords:
  - vulnerability
  - responsible disclosure
  - bug bounty
  - security@
- source: https://www.amboras.com/.well-known/security.txt
  kind: rfc9116 probe
  http_status: 404