Calypso Workstation · Vulnerability Disclosure

Calypso Workstation Vulnerability Disclosure

Vulnerability disclosure

Vulnerability disclosure posture for Nasdaq Calypso Workstation. Calypso Technology was acquired by Adenza and Adenza by Nasdaq, Inc. in 2023; the product now ships as Nasdaq Calypso from www.nasdaq.com and calypso.com no longer resolves, so the applicable disclosure program is the Nasdaq, Inc. corporate program rather than a product-specific one.

Calypso Workstation runs a coordinated vulnerability disclosure program on Hackerone.

Capital MarketsFinancial TechnologyMarket DataPortfolio-ManagementRisk ManagementTrading

Program: Hackerone

Disclosure Policy

Security Contact

Source

Vulnerability Disclosure

generated: '2026-09-05'
method: searched
source: https://hackerone.com/nasdaq
provider: Calypso Workstation
providerId: calypso-workstation
description: >-
  Vulnerability disclosure posture for Nasdaq Calypso Workstation. Calypso
  Technology was acquired by Adenza and Adenza by Nasdaq, Inc. in 2023; the
  product now ships as Nasdaq Calypso from www.nasdaq.com and calypso.com no
  longer resolves, so the applicable disclosure program is the Nasdaq, Inc.
  corporate program rather than a product-specific one.
ownership_note: >-
  This is a parent-brand attribution. The HackerOne program is registered to
  Nasdaq (handle "nasdaq", program id 6048, profile website nasdaq.com), the
  same legal entity that publishes the Calypso product pages at
  www.nasdaq.com/products/fintech/calypso. No Calypso-specific disclosure
  program or security.txt was found on any Calypso host.
programs:
  - name: Nasdaq Vulnerability Disclosure Policy
    type: vulnerability-disclosure
    platform: HackerOne
    url: https://hackerone.com/nasdaq
    handle: nasdaq
    program_id: 6048
    bounty: unknown
    x-evidence:
      fetched: '2026-09-05'
      url: https://hackerone.com/nasdaq
      http_status: 200
      note: >-
        The HTML page is JavaScript-rendered; the program record was confirmed
        from the JSON representation returned by the same URL, which carries
        id 6048, name "Nasdaq", handle "nasdaq" and profile website nasdaq.com.
security_txt:
  served: false
  probed:
    - url: https://www.nasdaq.com/.well-known/security.txt
      status: 404
    - url: https://nasdaq.com/.well-known/security.txt
      status: 404
    - url: https://calypsoeducation.nasdaq.com/.well-known/security.txt
      status: 404
    - url: https://learncalypso.nasdaq.com/.well-known/security.txt
      status: 404
  note: >-
    No RFC 9116 security.txt is served on any host this record knows. The
    disclosure route is the HackerOne program above, not a well-known document.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/calypso-workstation-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.