Vox Media · Vulnerability Disclosure

Vox Media Vulnerability Disclosure

Vulnerability disclosure

Vox Media runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyConsumerMediaPublishingNewsCommentsCommunityModerationGraphQL
Program: Hackerone

Disclosure Policy

Policy
https://www.voxmedia.com/security/

Security Contact

Contact
security@voxmedia.com

Source

Vulnerability Disclosure

vox-media-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
probe: true
source: https://www.voxmedia.com/security/
policy:
- https://www.voxmedia.com/security/
contact:
- security@voxmedia.com
pgp: true
response_sla: Email response within 24 hours outlining next steps, with regular updates during investigation/fix
rules:
- Test only your own accounts; unauthorized access of another user's data is forbidden
- No automated testing tools or attacks impacting reliability (port scanning, fuzzing, DoS)
- Investigation limited to Vox Media domains; third-party vendors out of scope
- Coordinated disclosure requested until the issue is addressed
evidence:
- source: https://www.voxmedia.com/security/
  kind: disclosure page
  keywords:
  - vulnerability
  - security@
notes: No public bug bounty program (HackerOne/Bugcrowd/Intigriti) found; no RFC 9116 security.txt published.