Mondoo · Vulnerability Disclosure

Mondoo Vulnerability Disclosure

Vulnerability disclosure

Mondoo publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyCybersecuritySecurityVulnerability ManagementComplianceCloud SecurityPolicy as CodeDevSecOpsGraphQLSAST
Program:

Disclosure Policy

Policy
https://github.com/mondoohq/.github/blob/main/SECURITY.md

Security Contact

Contact
security@mondoo.com

Source

Vulnerability Disclosure

mondoo-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://github.com/mondoohq/.github/blob/main/SECURITY.md
policy:
- https://github.com/mondoohq/.github/blob/main/SECURITY.md
contact:
- security@mondoo.com
bug_bounty: true
bug_bounty_note: >-
  Applicable submissions are directed to Mondoo's Bug Bounty Program. Reporters
  are asked to allow time to assess and respond, respect availability and privacy
  of services and third-party systems, and not disclose issues publicly before
  Mondoo has responded.
evidence:
- source: https://github.com/mondoohq/.github/blob/main/SECURITY.md
  kind: security-policy
  keywords:
  - responsible disclosure
  - bug bounty
  - security@mondoo.com