Certa · Vulnerability Disclosure

Certa Vulnerability Disclosure

Vulnerability disclosure

Certa publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyThird-Party Risk ManagementTPRMComplianceProcurementVendor ManagementRisk ManagementESGKYCSupplier Onboarding
Program:

Disclosure Policy

Policy
https://trust.certa.ai/

Security Contact

Contact
it@getcerta.com

Source

Vulnerability Disclosure

certa-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
source: https://trust.certa.ai/
policy:
- https://trust.certa.ai/
contact:
- it@getcerta.com
program: responsible-disclosure
bug_bounty: false
platform: SafeBase
notes: >-
  Certa publishes a responsible-disclosure invitation on its SafeBase-hosted
  Trust Center (trust.certa.ai). Reports are directed to it@getcerta.com
  ("SafeBase Responsible Disclosure Report for Certa"). No formal bug bounty
  program is advertised. No /.well-known/security.txt is published on certa.ai
  or getcerta.com (both return 404).
evidence:
- source: https://trust.certa.ai/
  kind: responsible-disclosure-page
  detail: "Report issue -> mailto:it@getcerta.com"