CodSpeed · Vulnerability Disclosure

Codspeed Vulnerability Disclosure

Vulnerability disclosure

CodSpeed runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyPerformanceBenchmarkingContinuous IntegrationDeveloper ToolsObservabilityTestingDevOpsAIMCP
Program: Hackerone

Disclosure Policy

Policy
https://codspeed.io/docs/security

Security Contact

Contact
support@codspeed.io

Source

Vulnerability Disclosure

codspeed-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
source: https://codspeed.io/docs/security
policy:
  - https://codspeed.io/docs/security
contact:
  - support@codspeed.io
bug_bounty: none
notes: >-
  No RFC 9116 /.well-known/security.txt and no formal bug-bounty program
  (HackerOne/Bugcrowd/Intigriti) were found. CodSpeed publishes a security
  policy page documenting its practices, GitHub permission model, and a security
  contact. Reported vulnerabilities can be sent to support@codspeed.io.
evidence:
  - source: https://codspeed.io/docs/security
    kind: security-policy-page
  - source: https://trust.codspeed.io
    kind: trust-center