Evaneos · Vulnerability Disclosure

Evaneos Vulnerability Disclosure

Vulnerability disclosure

Evaneos runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyMarketplaceTravelTourismTailor-Made TripsLocal AgenciesSustainable TravelB CorpFrance
Program: Hackerone security.txt present

Disclosure Policy

Policy
https://vdp.evaneos.com/

Security Contact

Contact
mailto:security@evaneos.com

Source

Vulnerability Disclosure

evaneos-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-08-17'
method: searched
probe: true
source: https://vdp.evaneos.com/
policy:
- https://vdp.evaneos.com/
contact:
- mailto:security@evaneos.com
program:
  type: vulnerability-disclosure-policy
  bounty: false
  bounty_note: >-
    Stated verbatim on the policy page: "Evaneos does not have any security bounty program or
    rewards for discovering security flaws."
  platform: self-hosted (vdp.evaneos.com); no HackerOne/Bugcrowd/Intigriti listing found
  scope: >-
    "This policy applies to any digital assets owned, operated, or maintained by Evaneos."
    Out of scope: assets or equipment not owned by parties participating in the policy.
  safe_harbor: not-stated
  preferred_languages:
  - en-US
  - fr-FR
  encryption:
    pgp_key: https://keys.openpgp.org/vks/v1/by-fingerprint/AACE4E09E738BB0985A8C684EB23FEA822676521
    fingerprint: AACE4E09E738BB0985A8C684EB23FEA822676521
security_txt:
  url: https://www.evaneos.com/.well-known/security.txt
  status: 200
  signed: true
  expires: '2028-01-13T10:21:41Z'
  file: well-known/evaneos-security.txt
evidence:
- source: https://www.evaneos.com/.well-known/security.txt
  kind: security.txt (live probe, HTTP 200, PGP-signed)
- source: https://vdp.evaneos.com/
  kind: disclosure policy page (live fetch, HTTP 200)