Gartner Vulnerability Disclosure

generated: '2026-09-12'
method: searched
probe: true
source: https://www.gartner.com/.well-known/security.txt
program: Gartner Vulnerability Disclosure Program
bug_bounty: false
policy:
- https://www.gartner.com/en/about/policies/vulnerability-disclosure-program
contact:
- mailto:responsibledisclosure@gartner.com
canonical: https://www.gartner.com/.well-known/security.txt
preferred_languages: en
hiring: https://jobs.gartner.com/jobs/?search=Security&department=Technology&pagesize=20
expires: '2025-12-31T04:59:00.000Z'
expired: true
findings:
- >-
  The security.txt served at https://www.gartner.com/.well-known/security.txt on
  2026-09-12 is well-formed RFC 9116 and carries a real Contact, Policy, Canonical and
  Hiring field, but its Expires value is 2025-12-31T04:59:00.000Z — more than eight
  months in the past. RFC 9116 §2.5.5 says a document past its Expires date should not
  be trusted; this is a one-line fix for Gartner.
- >-
  The linked policy page could not be read by this pass: www.gartner.com answers a
  Cloudflare managed challenge (HTTP 403, cf-mitigated: challenge) to every request from
  a non-browser client. The page is presumed live — a challenge is our crawler being
  turned away, not evidence of absence — but its contents are unverified here.
evidence:
- source: https://www.gartner.com/.well-known/security.txt
  kind: security.txt (live probe)
  http_status: 200
  content_type: text/plain
  fetched: '2026-09-12'
  file: well-known/gartner-security.txt
- source: https://www.gartner.com/en/about/policies/vulnerability-disclosure-program
  kind: disclosure policy page (linked from security.txt)
  http_status: 403
  note: Cloudflare managed challenge; page not readable by this probe
  fetched: '2026-09-12'