generated: '2026-07-17'
method: searched
probe: true
source: https://www.anomali.com/security
policy:
- https://www.anomali.com/security
contact:
- security@anomali.com
description: >-
  Anomali runs a responsible disclosure program inviting security researchers to
  report security issues in its online systems. Reports go to security@anomali.com.
  Anomali also publishes product security advisories (e.g. ANML-2023-01, Anomali
  Match OS Command Injection) and offers a security-advisory RSS feed. The
  automated security.txt/disclosure-path probe did not record this because
  Anomali does not publish a /.well-known/security.txt and exposes the program on
  its /security marketing page; this is the searched, human-verified fill.
advisories:
  feed: https://www.anomali.com/security-advisory/rss.xml
evidence:
- source: https://www.anomali.com/security
  kind: responsible-disclosure page (security@ contact + advisory feed)