Runharbor · Vulnerability Disclosure

Runharbor Vulnerability Disclosure

Vulnerability disclosure

Harbor publishes an RFC 9116 security.txt at https://runharbor.com/.well-known/security.txt naming security@runharbor.com as the disclosure contact (Expires 2027-03-01). The /security page invites researchers to report vulnerabilities by email with a proof of concept and the tooling used. No public bug-bounty program (HackerOne/Bugcrowd/Intigriti) was found.

Runharbor runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyClinical TrialsHealthcareContract Research OrganizationElectronic Data CaptureLife SciencesComplianceArtificial IntelligenceeClinical

Program: Hackerone security.txt present

Disclosure Policy

Policy

https://runharbor.com/security

Security Contact

Contact

mailto:security@runharbor.com

Source

Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: well-known/runharbor-security.txt
policy:
- https://runharbor.com/security
contact:
- mailto:security@runharbor.com
description: >-
  Harbor publishes an RFC 9116 security.txt at
  https://runharbor.com/.well-known/security.txt naming security@runharbor.com as
  the disclosure contact (Expires 2027-03-01). The /security page invites
  researchers to report vulnerabilities by email with a proof of concept and the
  tooling used. No public bug-bounty program (HackerOne/Bugcrowd/Intigriti) was
  found.
evidence:
- source: well-known/runharbor-security.txt
  kind: security.txt
- source: https://runharbor.com/security
  kind: security page accepts email vulnerability reports