Kumoai Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://docs.nvidia.com/sdgm/security-and-governance
policy:
- https://docs.nvidia.com/sdgm/security-and-governance
contact:
- security@kumo.ai
security_txt: null
bug_bounty: null
program:
  formal_vdp: false
  note: Kumo publishes a SaaS Security White Paper describing its security program
    — layered access controls, least privilege, strong authentication, logging and
    monitoring, vulnerability management including external penetration testing, a
    formal incident management policy, and a biannual security steering committee.
    A dedicated security contact (security@kumo.ai) is published, but there is no
    named responsible-disclosure policy page, no /.well-known/security.txt, and no
    public bug bounty program (HackerOne / Bugcrowd / Intigriti all negative).
evidence:
- source: https://docs.nvidia.com/sdgm/security-and-governance
  kind: security-whitepaper
  keywords:
  - vulnerability management
  - external penetration testing
  - incident management policy
  - security@kumo.ai
- source: https://kumo.ai/.well-known/security.txt
  kind: security.txt
  status: 404