ForceDream · Vulnerability Disclosure

Forcedream Ai Vulnerability Disclosure

Vulnerability disclosure

ForceDream runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

AI AgentsAgent MarketplaceMCPA2ACryptographic ProofsAI Inference RoutingAgentic PaymentsAgentic CommerceAgent-NativeUnited Kingdom
Program: Hackerone security.txt present

Disclosure Policy

Policy
https://forcedream.com/trust

Security Contact

Contact
mailto:security@forcedream.com

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-09-19'
method: searched
probe: true
source: well-known/forcedream-ai-security.txt
policy:
  - https://forcedream.com/trust
contact:
  - mailto:security@forcedream.com
security_txt:
  file: well-known/forcedream-ai-security.txt
  served_on: [forcedream.ai, api.forcedream.ai, www.forcedream.com, forcedream.com]
  fields: {Contact: 'mailto:security@forcedream.com', Preferred-Languages: en, Canonical: 'https://forcedream.com/.well-known/security.txt', Policy: 'https://forcedream.com/trust', Expires: absent}
  rfc9116_gap: No Expires field (required by RFC 9116).
program:
  type: security.txt contact + trust centre
  bug_bounty: none found
  bug_bounty_checked: [HackerOne, Bugcrowd, Intigriti (web search 2026-09-19, no ForceDream programme), /security (404 on both domains), /.well-known/security.txt Policy line]
  safe_harbor: not stated
  response_commitment: '"Security or compliance questions? Our trust team responds within one business day." (trust centre, trust@forcedream.ai)'
  terms_clause: '"3.1 Credential security ... Notify support@forcedream.com immediately on suspected compromise." (Terms)'
evidence:
  - source: well-known/forcedream-ai-security.txt
    kind: security.txt (previously harvested)
  - source: https://www.forcedream.com/trust
    kind: Policy target named by security.txt; live 200 on 2026-09-19
  - source: https://www.forcedream.com/developers/security
    kind: Developer security page (WORM chain, key hashing, fail-closed modules) — architecture, not a disclosure policy
notes:
  - The Policy URL resolves to the Trust Centre overview rather than a dedicated vulnerability-disclosure or responsible-disclosure page; the disclosure channel is the mailbox.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/forcedream-ai-vulnerability-disclosure"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.