Imgauth Api Di Attestazione Opere Digitali Vulnerability Disclosure

generated: '2026-08-11'
method: searched
probe: true
source: https://attestazione.spaziogenesi.org/sicurezza/
policy:
  - https://attestazione.spaziogenesi.org/sicurezza/
contact:
  - mailto:it@spaziogenesi.org
security_txt:
  url: https://imgauth.spaziogenesi.org/.well-known/security.txt
  http_status: 200
  rfc: '9116'
  expires: '2027-07-21T00:00:00.000Z'
  canonical: https://imgauth.spaziogenesi.org/.well-known/security.txt
  preferred_languages: [it, en]
  also_served_on: https://attestazione.spaziogenesi.org/.well-known/security.txt
bug_bounty:
  program: null
  platform: null
  note: >-
    No HackerOne, Bugcrowd or Intigriti program and no paid bounty — expected for a volunteer-run
    non-profit. What IS published is a named policy page with scope, safe harbour and response timelines,
    reachable from a valid, unexpired security.txt. The disclosure channel opened 2026-07-21 and is
    recorded in the public changelog.
policy_contents:
  - scope of the disclosure program
  - safe harbour for good-faith researchers
  - incident contact and response timelines
evidence:
  - source: well-known/imgauth-api-di-attestazione-opere-digitali-security.txt
    kind: security.txt
    http_status: 200
  - source: https://attestazione.spaziogenesi.org/sicurezza/
    kind: disclosure policy page
    http_status: 200
    checked: '2026-08-11'