Risk Ledger · Vulnerability Disclosure

Risk Ledger Vulnerability Disclosure

Vulnerability disclosure

Risk Ledger runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanySecurityCybersecurityThird-Party Risk ManagementSupply Chain SecurityRisk ManagementComplianceGovernanceSaaS
Program: Hackerone

Disclosure Policy

Policy
https://riskledger.com/responsible-disclosure-policy

Security Contact

Contact
vulnerability.disclosure@riskledger.com
Contact
security@riskledger.com

Source

Vulnerability Disclosure

risk-ledger-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://riskledger.com/responsible-disclosure-policy
probe: false
policy:
- https://riskledger.com/responsible-disclosure-policy
contact:
- vulnerability.disclosure@riskledger.com
- security@riskledger.com
bug_bounty: false
pgp: null
safe_harbor: true
remediation_window_days: 90
scope: >-
  All digital assets owned, operated, or maintained by Risk Ledger Ltd.
  Excludes TLS/HTTPS configuration suggestions, email authentication protocols,
  banner disclosure, social engineering, and third-party systems.
evidence:
- source: https://riskledger.com/responsible-disclosure-policy
  kind: disclosure-page
  keywords: [responsible disclosure, vulnerability, safe harbor, security@]
notes: >-
  Standard coordinated vulnerability disclosure policy; no formal bug bounty
  program (HackerOne/Bugcrowd/Intigriti) identified. No /.well-known/security.txt
  published (HTTP 404 at probe time).