Happyrobot · Vulnerability Disclosure

Happyrobot Vulnerability Disclosure

Vulnerability disclosure

Happyrobot runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

AI AgentsAgent OrchestrationVoice AIConversational AILogisticsFreightSupply ChainWorkflow-AutomationContact CenterTelephonyMCPagent-nativeAgent GovernanceEnterprise Automation

Program: Hackerone security.txt present

Disclosure Policy

Security Contact

Contact

mailto:security@happyrobot.ai

Source

Vulnerability Disclosure

generated: '2026-08-01'
method: searched
probe: true
source: https://happyrobot.ai/.well-known/security.txt
security_txt:
  url: https://happyrobot.ai/.well-known/security.txt
  http_status: 200
  spec: RFC 9116
  served_on_hosts:
  - happyrobot.ai
  - platform.happyrobot.ai
  - app.happyrobot.ai
  fields:
    Contact: mailto:security@happyrobot.ai
    Expires: '2026-09-10T13:32:00Z'
    Hiring: https://jobs.ashbyhq.com/happyrobot.ai
    Preferred-Languages: en, es
contact:
- mailto:security@happyrobot.ai
policy: []
bug_bounty:
  program: null
  platform: null
  note: >-
    No HackerOne, Bugcrowd or Intigriti program was found, and no /security, /responsible-disclosure or
    /vulnerability-disclosure page exists on the marketing site (all 404).
gaps:
- No `Policy:` field in security.txt, so there is no published disclosure policy to point a researcher at
  — only an email address.
- No `Encryption:` field (no PGP key for reporting).
- No `Canonical:` field.
- The `Expires` value is 2026-09-10, roughly six weeks after this probe — the file will need rotation
  soon or it becomes non-conformant.
- security.txt is not served on www.happyrobot.ai (404), only on the apex and the app/platform hosts.
evidence:
- source: https://happyrobot.ai/.well-known/security.txt
  kind: security.txt
  http_status: 200
- source: well-known/happyrobot-security.txt
  kind: harvested copy
x-evidence:
  fetched: '2026-08-01'
  negative_probes:
  - url: https://www.happyrobot.ai/security
    http_status: 404
  - url: https://www.happyrobot.ai/trust
    http_status: 404
  - url: https://security.happyrobot.ai
    result: does not resolve
  - url: https://www.happyrobot.ai/.well-known/security.txt
    http_status: 404

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/happyrobot-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.