Impact · Vulnerability Disclosure

Impact Vulnerability Disclosure

Vulnerability disclosure

Impact publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

AffiliatesPartnershipsPerformance MarketingCommissionTrackingCreator EconomyPartner ManagementReferralAttributionPayoutsMarketingAdvertisingMCPAgents

Program: security.txt present

Disclosure Policy

Policy

https://impact.responsibledisclosure.com/hc/en-us

Security Contact

Contact

https://impact.responsibledisclosure.com/hc/en-us

Source

Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source: https://impact.com/.well-known/security.txt
http_status: 200
checked: '2026-08-13'
signed: true
signature: PGP (SHA512 clearsigned)
policy:
  - https://impact.responsibledisclosure.com/hc/en-us
contact:
  - https://impact.responsibledisclosure.com/hc/en-us
encryption:
  - https://impact.com/.well-known/pgp-key.txt
acknowledgments:
  - https://impact.responsibledisclosure.com/hc/en-us/articles/360063057853-Acknowledgments
preferred_languages:
  - en
canonical: https://impact.com/.well-known/security.txt
expires: '2029-01-01T00:00:00Z'
rfc9116: true
bug_bounty:
  platform: Responsible Disclosure (impact.responsibledisclosure.com)
  paid: unknown
  scope_published: see the disclosure portal
evidence:
  - source: https://impact.com/.well-known/security.txt
    kind: security.txt (live probe)
    status: 200
    file: well-known/impact-security.txt
  - source: https://impact.com/security-and-privacy/
    kind: security and privacy page linking the responsible disclosure programme
    status: 200
notes:
  - The security.txt is PGP clearsigned and carries every optional RFC 9116 field except
    Hiring, with an Expires date well in the future.
  - Contact and Policy both resolve to the same hosted disclosure portal; there is no direct
    security email address.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/impact-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.