Food Info · Vulnerability Disclosure

Food Info Vulnerability Disclosure

Vulnerability disclosure

Food Info publishes an RFC 9116 security.txt with a security contact and an expiry date. There is no separate published vulnerability-disclosure policy page, and no bug-bounty program was found on HackerOne, Bugcrowd or Intigriti.

Food Info runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

NutritionFoodFood CompositionNutrientsDataOpen DataDieteticsRecipesHealthResearch
Program: Hackerone security.txt present

Disclosure Policy

Security Contact

Contact
https://food-info.org/contact
Contact
info@food-info.org

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-08-04'
method: searched
probe: true
source: https://food-info.org/.well-known/security.txt
description: >-
  Food Info publishes an RFC 9116 security.txt with a security contact and an expiry date. There is
  no separate published vulnerability-disclosure policy page, and no bug-bounty program was found on
  HackerOne, Bugcrowd or Intigriti.
verified: '2026-08-04'
security_txt:
  url: https://food-info.org/.well-known/security.txt
  status: 200
  file: well-known/food-info-security.txt
  contact:
  - https://food-info.org/contact
  expires: '2027-08-04T18:59:03.100Z'
  preferred_languages: en
  canonical: https://food-info.org/.well-known/security.txt
policy: []
contact:
- https://food-info.org/contact
- info@food-info.org
bug_bounty: none
evidence:
- source: https://food-info.org/.well-known/security.txt
  kind: security.txt
  status: 200
- source: https://api.food-info.org/api/v1/openapi.json
  kind: openapi-contact
  status: 200
  note: info.contact.email is info@food-info.org
gaps:
- No `Policy:` field in security.txt — there is a contact route but no published disclosure policy,
  safe-harbour statement or response-time commitment.
- No `Encryption:` field and no PGP key.