Wispr AI · Vulnerability Disclosure

Wispr Ai Vulnerability Disclosure

Vulnerability disclosure

Wispr AI publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyVoiceSpeech-to-TextDictationArtificial IntelligenceProductivityTranscription
Program: security.txt present

Disclosure Policy

Policy
https://wisprflow.ai/bug-bounty

Security Contact

Contact
https://wisprflow.ai/bug-bounty (web form submission; no direct email published)

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-07-21'
method: searched
probe: true
source: https://wisprflow.ai/bug-bounty
policy:
- https://wisprflow.ai/bug-bounty
contact:
- https://wisprflow.ai/bug-bounty (web form submission; no direct email published)
program:
  platform: self-hosted
  bounty: true
  bounty_scope: Critical and High severity paid; Medium/Low/Informational acknowledgment
    only; max 5 bounty-eligible reports per calendar month
  in_scope:
  - '*.wisprflow.ai production domains'
  - backend APIs
  - client applications (Electron, macOS, Windows, iOS, Android)
  out_of_scope:
  - third-party services
  - social engineering
  - denial of service
  - unvalidated scanner output
  response_sla: 3 business days acknowledgment for critical findings; 30-day maximum
    for final classification
  disclosure_window: 90 days from acknowledgment
  safe_harbor: true
evidence:
- source: https://wisprflow.ai/bug-bounty
  kind: bug-bounty-page
  status: 200
- source: https://wisprflow.ai/.well-known/security.txt
  kind: security.txt
  status: 404