CrossEngage · Vulnerability Disclosure

Crossenagage Vulnerability Disclosure

Vulnerability disclosure

CrossEngage runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyCustomer Data PlatformMarketingCustomer EngagementMarketing AutomationCross-ChannelPersonalizationPredictive AnalyticsSegmentationCampaign ManagementProduct FeedData ExportWebhookWeb TrackingGermany

Program: Hackerone security.txt present

Disclosure Policy

Policy

https://trust.spotler.com/responsible-disclosure

Security Contact

Contact

disclosure@spotler.com

Contact

infosec@spotler.com

Source

Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source: https://trust.spotler.com/responsible-disclosure
policy:
- https://trust.spotler.com/responsible-disclosure
contact:
- disclosure@spotler.com
- infosec@spotler.com
pgp: true
note: CrossEngage was acquired by Spotler and its disclosure programme runs at the Spotler Trust Center.
  The Responsible Disclosure page (fetched 2026-08-13, HTTP 200) asks researchers to report to disclosure@spotler.com,
  offers a PGP key for encrypted submissions, and sets out scope rules (no DDoS, no social engineering,
  no third-party data access, no public discussion before resolution). No public bug-bounty platform (HackerOne/Bugcrowd/Intigriti)
  is used.
security_txt:
  served: unverified
  note: 'https://crossengage.io/.well-known/security.txt 301s to https://spotler.com/.well-known/security.txt,
    which returns HTTP 403 behind a Cloudflare managed browser challenge on every attempt, including with
    a browser user-agent. We could not read a security.txt ourselves, so none is claimed and no SecurityTxt
    pointer is emitted. The provider hosts do not serve one: /.well-known/security.txt returns 404 on
    api.crossengage.io, api.documentation.crossengage.io, documentation.crossengage.io and app.crossengage.io.'
evidence:
- source: https://trust.spotler.com/responsible-disclosure
  kind: responsible-disclosure-page
  http_status: 200
  keywords:
  - responsible disclosure
  - disclosure@spotler.com
  - PGPKEY
  - report your findings
- source: https://trust.spotler.com/
  kind: trust-center-index
  http_status: 200
- source: https://spotler.com/.well-known/security.txt
  kind: security.txt
  http_status: 403
  keywords:
  - cloudflare managed challenge

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/crossenagage-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.