Bazaarvoice Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source:
- https://www.bazaarvoice.com/legal/vulnerability-disclosure-policy/
- https://hackerone.com/bazaarvoice
- https://www.bazaarvoice.com/company/trust/faq/
policy:
- https://www.bazaarvoice.com/legal/vulnerability-disclosure-policy/
- https://hackerone.com/bazaarvoice
contact:
- security@bazaarvoice.com
program:
  type: vulnerability-disclosure-policy
  platform: HackerOne
  platform_url: https://hackerone.com/bazaarvoice
  bounty: unknown
  safe_harbor: true
  safe_harbor_detail: >-
    The policy states Bazaarvoice will not take legal action against researchers who discover and
    report vulnerabilities in accordance with the policy, and asks that findings not be publicly
    disclosed without express written consent.
  pgp: true
  pgp_detail: Findings may be encrypted with Bazaarvoice's published public PGP key.
security_txt: false
security_txt_note: >-
  Bazaarvoice does not serve an RFC 9116 /.well-known/security.txt on any host in this profile -
  every path 404s (see well-known/bazaarvoice-well-known.yml). The disclosure program is published
  as a legal page plus a HackerOne policy page instead.
evidence:
- {source: https://www.bazaarvoice.com/legal/vulnerability-disclosure-policy/, http_status: 200, kind: disclosure-policy}
- {source: https://hackerone.com/bazaarvoice, http_status: 200, kind: hackerone-policy}
- {source: https://www.bazaarvoice.com/company/trust/faq/, http_status: 200, kind: security-contact, detail: 'Send an email with details of the suspected security issue to security@bazaarvoice.com'}
- {source: https://www.bazaarvoice.com/.well-known/security.txt, http_status: 404, kind: security-txt-absent}