Opal Security · Vulnerability Disclosure

Opal Security Vulnerability Disclosure

Vulnerability disclosure

Opal Security runs a coordinated vulnerability disclosure program on Hackerone.

CompanyCybersecurityAccess ManagementIdentity and Access ManagementLeast PrivilegeAccess ReviewsSecurity
Program: Hackerone

Disclosure Policy

Security Contact

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-07-20'
method: searched
source: https://opal.dev/security
provider: Opal Security
security_txt:
  present: false
  notes: No /.well-known/security.txt is served on opal.dev, api.opal.dev, app.opal.dev, or docs.opal.dev (all 404 or SPA soft-404).
bug_bounty:
  program: none-published
  platform: none
disclosure:
  policy_page: https://opal.dev/security
  contact: security@opal.dev
  description: >-
    Opal's Trust Center documents a vulnerability management program (monthly
    internal vulnerability scans and at-least-annual independent third-party
    penetration testing) and an incident response plan. Security questions and
    reports are directed to security@opal.dev. No formal public bug-bounty
    program (HackerOne/Bugcrowd/Intigriti) or security.txt was found.
vulnerability_management:
  internal_scans: monthly
  third_party_pentest: at least annually
  incident_response_plan: documented