Doctronic · Vulnerability Disclosure

Doctronic Vulnerability Disclosure

Vulnerability disclosure

Doctronic publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyHealthTelemedicineTelehealthArtificial IntelligenceHealthcareDigital HealthConsumer
Program: security.txt present

Disclosure Policy

Policy
https://www.doctronic.ai/.well-known/security.txt

Security Contact

Contact
mailto:security@doctronic.ai

Source

Vulnerability Disclosure

doctronic-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
source: well-known/doctronic-security.txt
policy:
- https://www.doctronic.ai/.well-known/security.txt
contact:
- mailto:security@doctronic.ai
preferred_languages: en
expires: '2026-12-31T00:00:00.000Z'
disclosure_policy:
  acknowledge_within: 48 hours
  update_cadence: every 7 days
  public_disclosure_after: 90 days
scope:
  in_scope:
  - www.doctronic.ai
  - cms.doctronic.ai
  - api.doctronic.ai
  out_of_scope:
  - Social engineering
  - Physical attacks
  - Third-party services
safe_harbor: >-
  Good-faith researchers who do not access, modify, or exfiltrate patient data
  and do not degrade services will not face legal action.
acknowledgments: >-
  Private thanks and possible tokens of appreciation for valid reports; public
  acknowledgment available on request after resolution.
evidence:
- source: well-known/doctronic-security.txt
  kind: security.txt (RFC 9116)