Klaus Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://www.zendesk.com/company/policies-and-guidelines/responsible-disclosure-policy/
note: >-
  Klaus operates as Zendesk QA; klausapp.com redirects to zendesk.com and the
  vulnerability disclosure program is Zendesk's, covering the Klaus/Zendesk QA
  surface. No /.well-known/security.txt was published on any klausapp.com or
  zendesk.com host at probe time.
policy:
- https://www.zendesk.com/company/policies-and-guidelines/responsible-disclosure-policy/
contact:
- security@zendesk.com
bug_bounty:
  platform: HackerOne
  url: https://hackerone.com/zendesk
  status: linked-from-trust-center
  http_status: 404
  note: >-
    The Zendesk Trust Center links to hackerone.com/zendesk; the page returns 404 to
    anonymous requests, consistent with a private/invite-only program.
security_txt:
  present: false
  probed:
  - {url: 'https://www.klausapp.com/.well-known/security.txt', status: 403}
  - {url: 'https://pub.klausapp.com/.well-known/security.txt', status: 404}
  - {url: 'https://api.klausapp.com/.well-known/security.txt', status: 401}
  - {url: 'https://www.zendesk.com/.well-known/security.txt', status: 403}
evidence:
- source: https://www.zendesk.com/company/policies-and-guidelines/responsible-disclosure-policy/
  kind: responsible-disclosure-policy
  keywords: [responsible disclosure, security@zendesk.com]
- source: https://www.zendesk.com/trust-center/
  kind: trust-center-link
  keywords: [bug bounty, HackerOne, vulnerability]