Knoxsystems Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://knoxsystems.com/
description: >-
  Knox Systems publishes a "Report Vulnerability" channel in the site-wide footer
  of knoxsystems.com, routing reports to support@knoxsystems.com with a
  pre-filled "Vulnerability Report Submission" subject. The automated
  probe-security-programs.py pass returned vdp=none because Knox publishes no
  /.well-known/security.txt and no /security or /responsible-disclosure page —
  this file is the human-verified fill from the rendered footer markup.
policy: []
contact:
- support@knoxsystems.com
submission_url: mailto:support@knoxsystems.com?subject=Vulnerability%20Report%20Submission
bug_bounty:
  program: null
  platform: null
  note: No public bug bounty program (HackerOne / Bugcrowd / Intigriti) found.
security_txt:
  published: false
  probed:
  - {url: 'https://knoxsystems.com/.well-known/security.txt', status: 404}
disclosure_pages_probed:
- {url: 'https://knoxsystems.com/security', status: 404}
- {url: 'https://knoxsystems.com/trust', status: 404}
- {url: 'https://knoxsystems.com/compliance', status: 404}
evidence:
- source: https://knoxsystems.com/
  kind: footer-link
  detail: >-
    <a href="mailto:support@knoxsystems.com?subject=Vulnerability%20Report%20Submission">
    labelled "Report Vulnerability" in the footer link list.
gaps:
- No RFC 9116 /.well-known/security.txt.
- No published disclosure policy, scope statement, or safe-harbor language.
- No stated acknowledgement or remediation SLA.