Anyapi Vulnerability Disclosure

generated: '2026-09-04'
method: searched
probe: true
source: https://getanyapi.com/security
note: >-
  probe-security-programs.py found nothing because getanyapi.com is a client-rendered Next.js
  site and the disclosure text is not in the raw HTML the probe reads. A rendered fetch of the
  same URL returns a real "Security and trust" page, last updated June 23 2026, whose section 6
  is headed "Reporting a vulnerability". It is minimal - a mailbox and nothing else - and is
  recorded at exactly that strength.
policy: [https://getanyapi.com/security]
contact: [support@getanyapi.com]
policy_text: 'Reporting a vulnerability: Report security issues to support@getanyapi.com'
last_updated: '2026-06-23'
bug_bounty:
  present: false
  platforms_checked: [HackerOne, Bugcrowd, Intigriti]
security_txt:
  present: false
  probed:
    - {url: 'https://getanyapi.com/.well-known/security.txt', status: 404}
    - {url: 'https://api.getanyapi.com/.well-known/security.txt', status: 404}
    - {url: 'https://www.getanyapi.com/.well-known/security.txt', status: 404}
  note: >-
    The one clear gap. The provider has a disclosure contact and a page to put it on; adding an
    RFC 9116 /.well-known/security.txt with Contact and Policy lines would make it machine-
    discoverable at no cost.
disclosure_terms:
  safe_harbor: not stated
  response_sla: not stated
  scope: not stated
  note: No timeline, no safe-harbor language and no scope definition are published.
evidence:
  - {source: 'https://getanyapi.com/security', kind: disclosure-page, http_status: 200, section: '6. Reporting a vulnerability'}
other_security_statements:
  - 'Payments are handled by third-party payment processors. AnyAPI does not store full card numbers.'
  - 'API keys and account sessions authenticate all requests; keep them confidential and revoke compromised keys in the dashboard.'
  - 'You decide what the Service retrieves; we act on your instructions. We process request parameters and returned data only to provide the Service.'