IRONSCALES · Vulnerability Disclosure

Ironscales Vulnerability Disclosure

Vulnerability disclosure

IRONSCALES publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

email-securitycybersecurityphishinganti-phishingbusiness-email-compromiseaccount-takeoverthreat-intelligenceincident-responsesecurity-awareness-trainingphishing-simulationmicrosoft-365google-workspacesoc-automationdeepfake-detectionmcp
Program:

Disclosure Policy

Policy
https://trust.ironscales.com/

Security Contact

Contact
SOC@ironscales.com

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-08-04'
method: searched
probe: true
source: https://trust.ironscales.com/
policy:
- https://trust.ironscales.com/
contact:
- SOC@ironscales.com
program:
  type: responsible disclosure via trust center
  platform: SafeBase by Drata
  bug_bounty: false
  bounty_platform: null
  submission_instructions: >-
    IRONSCALES asks researchers to email SOC@ironscales.com with the subject line
    "SafeBase Responsible Disclosure Report for IRONSCALES".
  safe_harbour_published: not stated on the public page
security_txt:
  published: false
  probed:
  - https://ironscales.com/.well-known/security.txt
  - https://appapi.ironscales.com/.well-known/security.txt
  - https://members.ironscales.com/.well-known/security.txt
  - https://mcp.ironscales.com/.well-known/security.txt
  status: 404 on every host
  gap: >-
    An RFC 9116 security.txt at https://ironscales.com/.well-known/security.txt pointing at the trust
    center and SOC@ironscales.com would make the disclosure route machine-discoverable. IRONSCALES has
    the policy and the contact — only the well-known file is missing.
evidence:
- source: https://trust.ironscales.com/
  kind: trust-center-responsible-disclosure
  keywords:
  - responsible disclosure
  - SOC@ironscales.com
  - vulnerability and patch management
  - penetration testing
x-evidence:
  fetched: '2026-08-04'
  http_status: 200