Pendo.io · Vulnerability Disclosure

Pendoio Vulnerability Disclosure

Vulnerability disclosure

Pendo.io runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyProduct AnalyticsProduct ExperienceDigital AdoptionUser AnalyticsIn-App GuidanceCustomer FeedbackSaaS
Program: Hackerone

Disclosure Policy

Policy
https://www.pendo.io/trust/

Security Contact

Contact
security@pendo.io

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://www.pendo.io/trust/
policy:
- https://www.pendo.io/trust/
contact:
- security@pendo.io
bug_bounty: false
evidence:
- source: https://www.pendo.io/trust/
  kind: disclosure-page
  quote: "If you have found a security bug in Pendo and want to report it to us, please email security@pendo.io."
notes: >-
  Pendo documents an email-based responsible-disclosure channel (security@pendo.io)
  on its public trust page. No public bug-bounty program (HackerOne/Bugcrowd/Intigriti)
  and no /.well-known/security.txt were found (security.txt returned 404 on app.pendo.io).