EchoLeads · Vulnerability Disclosure

Echoleads Vulnerability Disclosure

Vulnerability disclosure

EchoLeads runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

AI voice salesAI voice agentscold calling automationAI SDRlead generationconversational AIomnichannel sales automationappointment schedulingWhatsApp automationInstagram DM automationvoice AIsales automationIndia
Program: Hackerone security.txt present

Disclosure Policy

Policy
https://echoleads.ai/security-policy

Security Contact

Contact
mailto:security@echoleads.ai
Contact
mailto:support@echoleads.ai

Source

Vulnerability Disclosure

echoleads-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-08-11'
method: searched
probe: true
source: https://echoleads.ai/.well-known/security.txt
policy:
- https://echoleads.ai/security-policy
contact:
- mailto:security@echoleads.ai
- mailto:support@echoleads.ai
bug_bounty: null
note: >-
  The security.txt itself is a real, unexpired RFC 9116 document served at 200 (Expires
  2027-04-20), so the disclosure contacts are verified. The two pages it points at are NOT
  currently retrievable: https://echoleads.ai/security-policy and
  https://echoleads.ai/security-hall-of-fame both return 502 Bad Gateway, the same origin failure
  affecting every uncached route on the marketing site. No bug bounty program (HackerOne,
  Bugcrowd, Intigriti) was found. Contact channel: verified. Policy text: unreadable.
evidence:
- source: https://echoleads.ai/.well-known/security.txt
  kind: security.txt (live probe)
  status: 200
- source: https://echoleads.ai/security-policy
  kind: Policy page named by security.txt
  status: 502
- source: https://echoleads.ai/security-hall-of-fame
  kind: Acknowledgments page named by security.txt
  status: 502
checked: '2026-08-11'