Whistic · Vulnerability Disclosure

Whistic Vulnerability Disclosure

Vulnerability disclosure

Whistic publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyThird-Party Risk ManagementVendor SecuritySecurity AssessmentsTrust CenterComplianceGRCCybersecurityArtificial Intelligence
Program:

Disclosure Policy

Policy
https://www.whistic.com/security

Security Contact

Contact
security@whistic.com

Source

Vulnerability Disclosure

whistic-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
probe: true
source: https://www.whistic.com/security
policy:
- https://www.whistic.com/security
contact:
- security@whistic.com
policy_effective: '2025-03-31'
bug_bounty: false
bounty_note: Not currently offering financial rewards for bug bounty submissions.
scope:
  in_scope:
  - console.whistic.co and downstream assets
  notes: Automated scanning tools are prohibited; disclosures require written permission
    before public release; safe harbor provided under CFAA and DMCA for good-faith research.
evidence:
- source: https://www.whistic.com/security
  kind: disclosure page
  keywords:
  - vulnerability disclosure policy
  - responsible disclosure
  - security research
  - safe harbor
  - security@whistic.com