Signalwire Vulnerability Disclosure

generated: '2026-08-27'
method: probed
source: live probes on 2026-08-27
published: false
note: >-
  No vulnerability disclosure surface was found. This is a recorded absence, not an unchecked box,
  and no Security pointer is emitted for it.
probes:
- url: https://signalwire.com/.well-known/security.txt
  status: 404
- url: https://api.signalwire.com/.well-known/security.txt
  status: 404
- url: https://developer.signalwire.com/.well-known/security.txt
  status: 200
  result: miss
  detail: Fern SPA catch-all HTML shell, not an RFC 9116 document.
- url: https://signalwire.com/security
  status: 404
- url: https://signalwire.com/company/security
  status: 404
- url: https://hackerone.com/signalwire
  status: 404
- url: https://bugcrowd.com/signalwire
  status: 404
security_contact_fallback:
  support_portal: https://support.signalwire.com/portal/en/newticket
  spec_contact: support@signalwire.com (info.contact in openapi/signalwire-rest-openapi.yml)
  trust_center: https://compliance.signalwire.com
  note: >-
    A Vanta trust center exists (see security/signalwire-trust-center.yml) but no coordinated
    disclosure policy, security.txt, or public bug bounty program was reachable.