SIX · Vulnerability Disclosure

Six Group Vulnerability Disclosure

Vulnerability disclosure

SIX runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

FinancialMarket DataStocksReference DataCorporate ActionsReal-TimeExchangeOpen BankingPaymentsSwitzerland
Program: Hackerone security.txt present

Disclosure Policy

Policy

Security Contact

Contact
https://www.six-group.com/en/contacts/services/soc.html

Source

Vulnerability Disclosure

Raw ↑
generated: '2026-07-22'
method: searched
probe: true
source: https://www.six-group.com/.well-known/security.txt
program: Coordinated Vulnerability Disclosure with an application-based bug bounty
  program on HackerOne.
policy:
- https://hackerone.com/six-group
scope:
- https://hackerone.com/six-group/policy_scopes
contact:
- https://www.six-group.com/en/contacts/services/soc.html
acknowledgements: https://github.com/sixgroup-security/bug-bounty
preferred_languages: [en, de, es]
security_txt_expires: '2025-12-31T00:00:00.000Z'
canonical: https://www.six-group.com/.well-known/security.txt
evidence:
- source: https://www.six-group.com/.well-known/security.txt
  kind: security.txt (live probe, saved to well-known/six-group-security.txt)
- source: https://developer.six-group.com/.well-known/security.txt
  kind: security.txt (identical copy on the developer portal host)
- source: https://hackerone.com/six-group
  kind: bug bounty program page (HTTP 200, 2026-07-22)
notes: The published security.txt Expires field (2025-12-31) is stale relative to
  the probe date.