Levity · Vulnerability Disclosure

Levity Vulnerability Disclosure

Vulnerability disclosure

Levity runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyArtificial IntelligenceLogisticsSupply ChainFreightWorkflow AutomationEmailDocument ProcessingSaaS
Program: Hackerone

Disclosure Policy

Policy
https://levity.ai/en/security

Security Contact

Contact
security@levity.ai

Source

Vulnerability Disclosure

levity-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-19'
method: searched
probe: true
source: https://levity.ai/en/security
policy:
- https://levity.ai/en/security
contact:
- security@levity.ai
bug_bounty:
  program: null
  platform: null
  note: No public bug bounty program (HackerOne / Bugcrowd / Intigriti) found.
security_txt:
  published: false
  note: /.well-known/security.txt returns 404 on levity.ai - see well-known/levity-well-known.yml.
evidence:
- source: https://levity.ai/en/security
  kind: security-page
  detail: Security page publishes a security contact address for security inquiries
    and vulnerability reports, alongside ISO 27001 and SOC 2 Type II certification
    claims and a link to the Levity Trust Center.
notes:
- Levity states authentication is delegated to WorkOS (no passwords stored) and that
  payment data is handled only by third-party processors (Stripe, Paddle).
- Recommendation for Levity - publish an RFC 9116 /.well-known/security.txt pointing
  at the security page and the security contact.