generated: '2026-06-20'
method: searched
probe: true
policy: [https://docs.airbyte.com/platform/operating-airbyte/security]
contact: [security@airbyte.com]
bug_bounty: null
evidence:
- source: https://docs.airbyte.com/platform/operating-airbyte/security
  kind: disclosure-policy
  detail: >-
    Docs instruct reporters to email the security team privately and not to file
    GitHub issues or post on community Slack/forum for security vulnerabilities.
notes: >-
  Airbyte documents a private security-reporting channel (security@airbyte.com)
  in its platform security docs. No public bug-bounty program (HackerOne /
  Bugcrowd / Intigriti) was found. No /.well-known/security.txt is published.