Stack Moxie · Vulnerability Disclosure

Stack Moxie Vulnerability Disclosure

Vulnerability disclosure

Stack Moxie runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyRevenue OperationsMarketing OperationsObservabilityMonitoringTestingTest AutomationQA AutomationMarketing AutomationEmail DeliverabilitySalesforceMarketogRPCSoftware-as-a-Service
Program: Hackerone security.txt present

Disclosure Policy

Policy
https://www.stackmoxie.com/security/

Security Contact

Contact
https://www.stackmoxie.com/support/

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-08-14'
method: searched
probe: true
source: https://www.stackmoxie.com/security/
policy:
- https://www.stackmoxie.com/security/
program: bug-bounty
contact:
- https://www.stackmoxie.com/support/
security_txt: false
detail: >-
  Stack Moxie runs a crowd-sourced bug-bounty program with rewards for reporting
  potential flaws, alongside recurring third-party penetration tests, static code
  analysis, and infrastructure vulnerability scans. There is no published bounty
  platform (no HackerOne/Bugcrowd/Intigriti page), no security@ address, and no
  /.well-known/security.txt on any host - reporters are told to use the contact
  form on the security page or the support page, so there is no machine-readable
  intake and no stated response or safe-harbor terms.
gaps:
- no /.well-known/security.txt (RFC 9116) on any Stack Moxie host
- no published disclosure SLA or safe-harbor statement
- no dedicated security contact address; intake is a marketing contact form
evidence:
- source: https://www.stackmoxie.com/security/
  kind: disclosure page
  keywords:
  - vulnerability
  - bug bounty
  - penetration testing
  - static code analysis
- source: well-known/stack-moxie-well-known.yml
  kind: security.txt probe
  result: 404 on stackmoxie.com, www.stackmoxie.com, app.stackmoxie.com

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/stack-moxie-vulnerability-disclosure"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.