Monetizenow Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source: https://www.monetizenow.ai/information-security-policy
description: >-
  MonetizeNow publishes a responsible-disclosure invitation inside its public
  Information Security Policy page. There is no /.well-known/security.txt on any
  host, no bug bounty program (no HackerOne / Bugcrowd / Intigriti listing was
  found), and no dedicated /security or /responsible-disclosure page — the
  policy page is the whole surface.
policy:
- https://www.monetizenow.ai/information-security-policy
contact:
- security@monetizenow.io
bug_bounty:
  program: null
  platform: null
  found: false
statement: >-
  "RESPONSIBLE DISCLOSURE — We welcome security reports. Contact
  security@monetizenow.io and allow reasonable time for remediation prior to
  public disclosure. A secure channel can be arranged for artifact exchange."
security_txt:
  served: false
  hosts_probed:
  - {host: www.monetizenow.ai, path: /.well-known/security.txt, status: 404}
  - {host: docs.monetizenow.io, path: /.well-known/security.txt, status: 404}
  - {host: api.monetizeplatform.com, path: /.well-known/security.txt, status: 401}
  - {host: app.monetizeplatform.com, path: /.well-known/security.txt, status: 200, verdict: spa-shell}
evidence:
- source: https://www.monetizenow.ai/information-security-policy
  kind: disclosure-policy-page
  http_status: 200
  keywords: [responsible disclosure, security@, remediation, public disclosure]
  fetched: '2026-08-13'
notes:
- >-
  RECOMMENDATION TO THE PROVIDER: publish the same two facts (Contact:
  mailto:security@monetizenow.io, Policy: the information-security-policy URL) at
  https://www.monetizenow.ai/.well-known/security.txt per RFC 9116, so machines
  can find them.
- Policy page carries "Last updated: Sep 24, 2024".