Automattic · Vulnerability Disclosure

Automattic Vulnerability Disclosure

Vulnerability disclosure

Automattic runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyContent ManagementPublishingBloggingWebsite HostingWeb PublishingContentCommentsSpam FilteringMediaAnalyticsDomainsE-CommerceOpen SourceDeveloper ToolsModel Context Protocol
Program: Hackerone security.txt present

Disclosure Policy

Policy

Security Contact

Contact
https://hackerone.com/automattic/reports/new
Contact
mailto:security@automattic.com

Source

Vulnerability Disclosure

Raw ↑
generated: '2026-07-31'
method: searched
probe: true
source: well-known/automattic-security.txt
policy:
- https://hackerone.com/automattic
contact:
- https://hackerone.com/automattic/reports/new
- mailto:security@automattic.com
evidence:
- source: well-known/automattic-security.txt
  kind: security.txt (previously harvested)