Perk · Vulnerability Disclosure

Perk Vulnerability Disclosure

Vulnerability disclosure

Perk (TravelPerk) publishes an RFC 9116 security.txt and runs a managed bug bounty / vulnerability disclosure program on Intigriti.

Perk runs a coordinated vulnerability disclosure program on Intigriti. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyCorporate TravelExpense ManagementSpend ManagementTravelInvoicesFintechSaaS
Program: Intigriti security.txt present

Disclosure Policy

Policy

Security Contact

Contact
mailto:securityteam@travelperk.com

Source

Vulnerability Disclosure

perk-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-20'
method: searched
probe: true
type: VulnerabilityDisclosure
name: Perk Vulnerability Disclosure
source: well-known/perk-security.txt
description: >-
  Perk (TravelPerk) publishes an RFC 9116 security.txt and runs a managed bug bounty /
  vulnerability disclosure program on Intigriti.
platform: Intigriti
policy:
- https://app.intigriti.com/company/programs/travelperk/travelperk/detail
acknowledgments:
- https://app.intigriti.com/company/programs/travelperk/travelperk/leaderboard
contact:
- mailto:securityteam@travelperk.com
security_txt:
  url: https://perk.com/.well-known/security.txt
  expires: '2025-12-31T23:00:00.000Z'
  preferred_languages: en, es
  note: The security.txt Expires date has lapsed (2025-12-31); the file is otherwise valid.
evidence:
- source: well-known/perk-security.txt
  kind: security.txt (RFC 9116) harvested from perk.com