Sight Machine Vulnerability Disclosure

generated: '2026-08-27'
method: searched
probe: true
source: https://www.sightmachine.com/.well-known/security.txt
contact:
- mailto:security@sightmachine.com
policy_url: https://www.sightmachine.com/security
expires: '2027-06-01T00:00:00.000Z'
preferred_languages: en
canonical: https://www.sightmachine.com/.well-known/security.txt
bug_bounty:
  program: false
  platform: null
  note: >-
    No HackerOne, Bugcrowd or Intigriti program was found. Reports are taken by email and
    through a web form; no safe-harbour language, scope statement, or response-time
    commitment is published.
intake:
  email: security@sightmachine.com
  web_form: https://www.sightmachine.com/security
  form_wording: >-
    "Found a vulnerability, or have a security, privacy, or ethics concern? Send it to our
    team using the form below" — the page states the team will follow up at the email
    provided.
evidence:
- url: https://www.sightmachine.com/.well-known/security.txt
  status: 200
  kind: RFC 9116 security.txt, saved verbatim to well-known/sight-machine-security.txt
- url: https://www.sightmachine.com/security
  status: 200
  kind: Vulnerability reporting page with intake form
gaps:
- >-
  The security.txt carries Contact, Expires, Preferred-Languages and Canonical but omits
  Policy, Encryption, Acknowledgments and Hiring — a Policy field pointing at
  /security would be a one-line improvement.
- No published disclosure policy, scope, or safe harbour.