Polycode · Vulnerability Disclosure

Polycode Co Uk Vulnerability Disclosure

Vulnerability disclosure

Polycode publishes a security contact for reporting issues; no disclosure policy is recorded. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

ChatMemoryAgentsA2AKnowledge GraphResearchArtificial IntelligenceOpen SourceConsultingUnited Kingdom

Program: security.txt present

Disclosure Policy

Security Contact

Contact

antony@polycode.co.uk

Source

Vulnerability Disclosure

generated: '2026-09-19'
method: searched
probe: true
source: https://gitlab.com/polycode-projects/marginalia/-/blob/main/_developers/ETHICS.md
policy: []
contact: [antony@polycode.co.uk]
bug_bounty: null
evidence:
- source: https://gitlab.com/polycode-projects/marginalia/-/blob/main/_developers/ETHICS.md
  http_status: 200
  kind: docs
  quote: 'Where to ask questions — Operator contact: antony@polycode.co.uk ... Issues, security disclosures, GDPR requests: email above.'
- source: https://marginalia.polycode.co.uk/.well-known/security.txt
  http_status: 403
  kind: security.txt
  note: Not served.
probed:
- {url: 'https://marginalia.polycode.co.uk/.well-known/security.txt', status: 403}
- {url: 'https://marginalia.polycode.co.uk/security', status: 200, note: SPA shell (soft-404)}
- {url: 'https://polycode.co.uk/.well-known/security.txt', status: 0, note: host does not resolve}
note: >-
  A published channel, not a programme: the operator's public ETHICS.md names a single email for "issues,
  security disclosures, GDPR requests" and there is no security.txt, no disclosure policy page, no safe-harbour
  statement and no bounty. probe-security-programs.py recorded vdp=none because it looks for policy pages on the
  web host; the channel lives in the source repository. Recorded as a thin but real disclosure contact.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/polycode-co-uk-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.