Despegar.com · Vulnerability Disclosure

Despegarcom Vulnerability Disclosure

Vulnerability disclosure

Despegar.com runs a coordinated vulnerability disclosure program on Bugcrowd. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyConsumerTravelHotelsFlightsActivitiesBookingLatin AmericaB2BMCPWebhooks
Program: Bugcrowd security.txt present

Disclosure Policy

Security Contact

Contact
mailto:appsec@despegar.com

Source

Vulnerability Disclosure

despegarcom-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
source: https://www.despegar.com/.well-known/security.txt
contact:
- mailto:appsec@despegar.com
bug_bounty:
  program: Bugcrowd Private BBP
  provider: Bugcrowd
  public: false
policy: []
expires: '2030-01-01T12:00:00Z'
evidence:
- source: https://www.despegar.com/.well-known/security.txt
  kind: security.txt (live probe)
- source: https://www.despegar.com/.well-known/security.txt
  kind: acknowledgments (Bugcrowd Private BBP)