Bardeen · Vulnerability Disclosure

Bardeen Vulnerability Disclosure

Vulnerability disclosure

Bardeen publishes a named security contact for vulnerability reports on its security page. There is no formal disclosure policy, no safe-harbour statement, no stated response or remediation window, and no bug bounty program — probed HackerOne, Bugcrowd and Intigriti plus the company's own hosts on 2026-08-29. The contact is human-readable only: /.well-known/security.txt returns 404 on www.bardeen.ai, bardeen.ai and www.getwiq.ai, so no automated scanner or agent can discover it. A two-line RFC 9116 file would close that gap without any policy work.

Bardeen runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

AI AutomationWorkflow-AutomationWeb ScrapingData EnrichmentBrowser ExtensionSales AutomationNo-CodeGo-To-Market

Program: Hackerone

Disclosure Policy

Policy

Policy

Policy

Policy

Security Contact

Contact

also_published_inDNS CAA record for bardeen.ai carries `0 iodef "mailto:security@bardeen.ai"` — an independent, machine-readable confirmation of the same address.

Contact

emailsecurity@bardeen.ai

Contact

quotePlease send any security related information or inquiries (including vulnerability disclosures) to security@bardeen.ai

Contact

sourcehttps://www.bardeen.ai/security

Source

Vulnerability Disclosure

generated: '2026-08-29'
method: searched
probe: true
source: https://www.bardeen.ai/security
url: https://www.bardeen.ai/security
status: 200
description: >-
  Bardeen publishes a named security contact for vulnerability reports on its security page. There
  is no formal disclosure policy, no safe-harbour statement, no stated response or remediation
  window, and no bug bounty program — probed HackerOne, Bugcrowd and Intigriti plus the
  company's own hosts on 2026-08-29. The contact is human-readable only: /.well-known/security.txt
  returns 404 on www.bardeen.ai, bardeen.ai and www.getwiq.ai, so no automated scanner or agent can
  discover it. A two-line RFC 9116 file would close that gap without any policy work.
contact:
  email: security@bardeen.ai
  source: https://www.bardeen.ai/security
  quote: "Please send any security related information or inquiries (including vulnerability
    disclosures) to security@bardeen.ai"
  also_published_in: >-
    DNS CAA record for bardeen.ai carries `0 iodef "mailto:security@bardeen.ai"` — an independent,
    machine-readable confirmation of the same address.
policy:
  published: false
  safe_harbour: false
  response_window: null
  scope_statement: false
bug_bounty:
  program: none
  platforms_probed:
    - url: https://hackerone.com/bardeen
      status: 404
    - url: https://bugcrowd.com/bardeen
      status: 404
    - url: https://app.intigriti.com/programs/bardeen
      status: 200
      note: >-
        Soft 200 — Intigriti's console is a single-page app that answers 200 for any program slug.
        A control probe of a nonsense slug returned the same shell, and the body contains zero
        occurrences of "Bardeen". Treated as a miss, not a program.
security_txt:
  served: false
  probes:
    - url: https://www.bardeen.ai/.well-known/security.txt
      status: 404
    - url: https://bardeen.ai/.well-known/security.txt
      status: 404
    - url: https://www.getwiq.ai/.well-known/security.txt
      status: 404
evidence:
  - source: https://www.bardeen.ai/security
    status: 200
    fetched: '2026-08-29'
    kind: disclosure contact on the security page

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/bardeen-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.