Knownwell Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://knownwell.com/security/
policy: []
policy_page: https://knownwell.com/security/
contact:
- infosec@knownwell.com
bug_bounty:
  program: null
  platform: null
  note: No HackerOne, Bugcrowd, or Intigriti program was found.
security_txt:
  published: false
  note: /.well-known/security.txt returns 404 on knownwell.com, api.knownwell.com, and
    ci.knownwell.com (see well-known/knownwell-well-known.yml).
evidence:
- source: https://knownwell.com/security/
  kind: security-page
  found:
  - Published security page with certifications (SOC 2, Data Privacy Framework)
  - Security contact infosec@knownwell.com
  - Annual third-party penetration testing
  - Trust center at https://trustcenter.knownwell.com
notes:
- 'Knownwell publishes a security page and a named security contact, but no formal
  responsible-disclosure or vulnerability-disclosure policy document was found. The Security
  pointer in apis.yml points at the published security page, which is the real artifact.'
- 'probe-security-programs.py returned vdp=none; this record was captured by direct fetch.'