Measurabl · Vulnerability Disclosure

Measurabl Vulnerability Disclosure

Vulnerability disclosure

Measurabl runs a coordinated vulnerability disclosure program on Hackerone.

esgreal-estatesustainabilitycarbon-accountingenergy-managementbuilding-performanceclimate-riskbenchmarkingcomplianceproptechutility-datacapital-markets
Program: Hackerone

Disclosure Policy

Security Contact

Source

Vulnerability Disclosure

Raw ↑
generated: '2026-08-01'
method: probed
probe: true
found: false
summary: >-
  Measurabl publishes NO external vulnerability disclosure channel. This is a recorded negative,
  not a gap in the search. The /security/ page describes an INTERNAL vulnerability management
  program (periodic scans, third-party scanning, internal and external penetration tests) but
  names no way for an outside researcher to report a vulnerability: no security.txt, no
  security@ address, no responsible-disclosure page, and no bug bounty program.
policy: []
contact: []
bug_bounty: []
probes:
- {url: 'https://api.measurabl.com/.well-known/security.txt', status: 404}
- {url: 'https://www.measurabl.com/.well-known/security.txt', status: 404}
- {url: 'https://measurabl.com/.well-known/security.txt', status: 404}
- {url: 'https://support.measurabl.com/.well-known/security.txt', status: 404}
- {url: 'https://www.measurabl.com/security/', status: 200, disclosure_channel: false, note: internal vulnerability management program only}
- {url: 'https://trust.measurabl.com', status: 0, note: host does not resolve}
- {registry: hackerone, query: measurabl, found: false}
- {registry: bugcrowd, query: measurabl, found: false}
only_published_contact:
  email: Legal@measurabl.com
  source: https://www.measurabl.com/privacy-policy/
  note: A legal/privacy contact, NOT a security disclosure contact. Not recorded as a disclosure channel.