Qualia Vulnerability Disclosure

generated: '2026-08-02'
method: searched
probe: true
source: https://www.qualia.com/.well-known/security.txt
policy:
- https://www.qualia.com/.well-known/security.txt
contact:
- mailto:security@qualia.com
bug_bounty:
  program: false
  statement: 'Qualia does not have a formal bug bounty program, however we always accept
    good-faith reports of security vulnerabilities. While we do not guarantee monetary
    rewards, we may consider them in the event a demonstrable, exploitable vulnerability
    is responsibly disclosed to us.'
  platform: none
security_txt:
  url: https://www.qualia.com/.well-known/security.txt
  file: well-known/qualia-security.txt
  spec: RFC 9116
  http_status: 200
  fields:
    contact: mailto:security@qualia.com
    preferred_languages: en
    policy: 'Inline "Policy + Bug Bounty Program" statement (non-standard field name;
      RFC 9116 expects a Policy: field carrying a URI).'
    hiring: https://www.qualia.com/careers/
    canonical: https://qualia.com/.well-known/security.txt
    expires: '2026-09-15T18:00:00.000Z'
  deviations:
  - 'Uses a non-standard field name "Policy + Bug Bounty Program" carrying prose rather
    than the RFC 9116 Policy field with a URI.'
  - No Encryption or Acknowledgments field.
  - 'Canonical points at https://qualia.com/... while the document is served from https://www.qualia.com/...'
evidence:
- source: well-known/qualia-security.txt
  kind: security.txt
- source: https://www.qualia.com/.well-known/security.txt
  kind: security.txt (live probe)
  http_status: 200
- source: https://www.qualia.com/trust/
  kind: trust center security section
x-evidence:
  fetched: '2026-08-02'