Shortcut Software Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: false
source: https://www.shortcut.com/security
policy:
- https://www.shortcut.com/disclosure/
contact:
- security@shortcut.com
bug_bounty: null
evidence:
- {source: https://www.shortcut.com/security, kind: security-page, detail: names a Responsible Disclosure Policy and security@shortcut.com contact}
- {source: https://www.shortcut.com/disclosure/, kind: responsible-disclosure-policy}
notes: >-
  Shortcut publishes a Responsible Disclosure Policy and a security@shortcut.com
  contact on its security page. No public bug-bounty program (HackerOne/Bugcrowd)
  was found. The API host's /.well-known/security.txt is not served (returns a 401
  organization-context error).