Fireflies.ai · Vulnerability Disclosure

Fireflies Vulnerability Disclosure

Vulnerability disclosure

Fireflies.ai runs a coordinated vulnerability disclosure program on Hackerone.

Artificial IntelligenceMeeting AssistantTranscriptionSummaryAction ItemsGraphQLMeetingsProductivityCollaborationConversation Intelligence
Program: Hackerone

Disclosure Policy

Policy
https://fireflies.ai/bug-bounty
Policy
https://fireflies.ai/security

Security Contact

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-08-14'
method: searched
probe: true
source: https://fireflies.ai/bug-bounty
policy:
- https://fireflies.ai/bug-bounty
- https://fireflies.ai/security
program:
  type: bug-bounty
  name: Fireflies Bug Bounty Rewards Program
  url: https://fireflies.ai/bug-bounty
  rewards: true
  platform: null
  platform_note: >-
    Self-hosted program page. No HackerOne, Bugcrowd or Intigriti listing was found, and Fireflies
    runs an additional invite-only track at https://fireflies.ai/security/bug-bounty-invite.
  description: >-
    "Help us enhance security by identifying vulnerabilities. Report bugs, earn rewards, and make
    Fireflies safer for everyone." Linked from the main security page.
contact: []
contact_note: >-
  No security contact address is published in machine-readable form. There is no
  /.well-known/security.txt on any Fireflies host, so a scanner or agent has no RFC 9116 path to
  the disclosure policy — it is discoverable only by following a link from the marketing security
  page. This is the single cheapest gap on the Fireflies security surface to close.
security_txt:
  present: false
  probed:
  - {url: 'https://fireflies.ai/.well-known/security.txt', http_status: 404}
  - {url: 'https://api.fireflies.ai/.well-known/security.txt', http_status: 404}
  - {url: 'https://mcp.fireflies.ai/.well-known/security.txt', http_status: 404}
  - {url: 'https://docs.fireflies.ai/.well-known/security.txt', http_status: 404}
evidence:
- source: https://fireflies.ai/bug-bounty
  http_status: 200
  kind: bug bounty program page
- source: https://fireflies.ai/security
  http_status: 200
  kind: disclosure link
  keywords: [bug bounty, vulnerabilities, report bugs, rewards]
- source: https://fireflies.ai/security/bug-bounty-invite
  kind: invite-only program link found in the security page markup
x-evidence:
  fetched: '2026-08-14'

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/fireflies-vulnerability-disclosure"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.