BitSight · Vulnerability Disclosure

Bitsight Vulnerability Disclosure

Vulnerability disclosure

BitSight runs a coordinated vulnerability disclosure program on Bugcrowd. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanySecurityCyber RiskSecurity RatingsThird-Party Risk ManagementAttack Surface ManagementThreat IntelligenceVendor Risk
Program: Bugcrowd security.txt present

Disclosure Policy

Policy
https://www.bitsight.com/.well-known/security.txt

Security Contact

Contact
mailto:bug@bitsight.com

Source

Vulnerability Disclosure

bitsight-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
source: well-known/bitsight-security.txt
program: bugcrowd
policy:
- https://www.bitsight.com/.well-known/security.txt
contact:
- mailto:bug@bitsight.com
detail: >-
  Security concerns are handled through Bitsight's Bugcrowd Bug Bounty Program;
  the published security.txt directs researchers to email bug@bitsight.com to be
  invited to the private Bugcrowd program.
evidence:
- source: well-known/bitsight-security.txt
  kind: security.txt
  keywords: [bugcrowd, bug bounty, 'contact: bug@bitsight.com']