Nivelo · Vulnerability Disclosure

Nivelo Vulnerability Disclosure

Vulnerability disclosure

Nivelo runs a coordinated vulnerability disclosure program on Hackerone.

CompanyPaymentsACHFintechPayrollRiskFraud DetectionMoney MovementReal-Time PaymentsTreasuryFedNowRTP
Program: Hackerone

Disclosure Policy

Policy
https://nivelo.io/security

Security Contact

Source

Vulnerability Disclosure

nivelo-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://nivelo.io/security
policy:
- https://nivelo.io/security
contact: []
program:
  bug_bounty: true
  name: Nivelo Bug Bounty Program
evidence:
- source: https://nivelo.io/security
  kind: security-page
  keywords:
  - bug bounty program
  - security is our top priority
notes: >-
  Nivelo's security page (https://nivelo.io/security) advertises a "Bug Bounty Program"
  and describes its security posture. No RFC 9116 /.well-known/security.txt was found
  (the host returns an "Invalid .well-known request" catch-all for all well-known paths),
  and no dedicated security contact email or third-party program (HackerOne/Bugcrowd/
  Intigriti) URL was published on the public page. The security page is the disclosure
  entry point.