Sailthru Vulnerability Disclosure

generated: '2026-08-12'
method: searched
probe: true
source: https://trust.zetaglobal.com/
policy:
- https://bugcrowd.com/engagements/cheetah-vdp
contact: []
program:
  type: vulnerability-disclosure-program
  platform: Bugcrowd
  name: Cheetah VDP
  url: https://bugcrowd.com/engagements/cheetah-vdp
  bounty: unknown
note: >-
  Sailthru serves no /.well-known/security.txt on any of its hosts
  (api.sailthru.com, products.zetaglobal.com, zetaglobal.com all 404) and
  publishes no responsible-disclosure page of its own. The disclosure route is
  the Bugcrowd engagement inherited from Cheetah Digital and now covering the
  former Marigold enterprise products under Zeta Global; it is linked from the
  Zeta Global Trust Center with the text "If you think you may have discovered
  a vulnerability, please send us a note." The Zeta trust center also lists a
  "Responsible Disclosure" control at full maturity.
evidence:
- source: https://trust.zetaglobal.com/
  kind: trust-center-link
  http_status: 200
- source: https://bugcrowd.com/engagements/cheetah-vdp
  kind: bug-bounty-platform
  http_status: 200
- source: https://api.sailthru.com/.well-known/security.txt
  kind: security.txt
  http_status: 404
- source: https://zetaglobal.com/.well-known/security.txt
  kind: security.txt
  http_status: 404