Thousandeyes Vulnerability Disclosure

generated: '2026-08-19'
method: probed
source: https://www.cisco.com/.well-known/security.txt
published: true
owner: Cisco PSIRT
ownership_note: ThousandEyes has been a Cisco business unit since the 2020 acquisition. No host under
  thousandeyes.com serves a security.txt (api. 404, docs. 404, www. 403 to all non-browser clients), and
  the ThousandEyes developer reference routes security matters to Cisco. The disclosure programme that
  covers ThousandEyes is therefore the Cisco one, published at the Cisco apex.
security_txt:
  url: https://www.cisco.com/.well-known/security.txt
  status: 200
  file: thousandeyes-cisco-security.txt
  signed: true
  expires: '2027-01-01T00:00:00.000Z'
contact: mailto:psirt@cisco.com
policy: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html
encryption: https://cscrdr.cloudapps.cisco.com/cscrdr/security/center/files/Cisco_PSIRT_PGP_Public_Key.asc
csaf: https://www.cisco.com/.well-known/csaf/provider-metadata.json
bug_bounty:
  found: false
  note: No HackerOne, Bugcrowd or Intigriti programme was found for ThousandEyes or Cisco PSIRT; Cisco
    runs coordinated disclosure through PSIRT directly.
probes:
- url: https://api.thousandeyes.com/.well-known/security.txt
  status: 404
- url: https://docs.thousandeyes.com/.well-known/security.txt
  status: 404
- url: https://www.thousandeyes.com/.well-known/security.txt
  status: 403
- url: https://www.cisco.com/.well-known/security.txt
  status: 200