Larridin Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://trust.larridin.com/
notes: >-
  The mechanical probe found no /.well-known/security.txt and no dedicated disclosure page on any
  Larridin host. Larridin does publicly state a responsible-disclosure posture on its SafeBase Trust
  Center, where "Responsible Disclosure" is listed under App Security with the status "Open to
  Responsible Disclosure". No public policy document, reporting address, bug-bounty program, or safe
  harbor terms are published — the underlying control documents sit behind a Trust Center access
  request.
status: published-posture-only
policy:
- https://trust.larridin.com/
contact: []
bug_bounty:
  present: false
  platforms_checked:
  - HackerOne
  - Bugcrowd
  - Intigriti
security_txt:
  present: false
  probed:
  - https://larridin.com/.well-known/security.txt
  - https://app.larridin.com/.well-known/security.txt
  - https://scout-api.larridin.com/.well-known/security.txt
  - https://docs.larridin.com/.well-known/security.txt
  note: >-
    app.larridin.com returns HTTP 200 for this path but serves the application's SPA HTML shell, not an
    RFC 9116 document.
evidence:
- source: https://trust.larridin.com/
  kind: trust-center-control
  control: Responsible Disclosure
  statement: Open to Responsible Disclosure
  section: App Security
related:
- security/larridin-trust-center.yml
- security/larridin-domain-security.yml