generated: '2026-08-06' method: searched probe: true source: https://docs.antimetal.com/admin/security policy: [] contact: - mailto:security@antimetal.com bug_bounty: program: null platform: null note: No HackerOne, Bugcrowd or Intigriti program was found. security_txt: present: false probed: - url: https://antimetal.com/.well-known/security.txt status: 404 evidence: - source: https://docs.antimetal.com/admin/security http_status: 200 kind: docs-security-page quote: 'Vulnerability disclosure — Report security concerns to security@antimetal.com.' - source: https://antimetal.com/security http_status: 404 kind: probe-miss gaps: - No RFC 9116 /.well-known/security.txt is served — the disclosure contact exists only as prose on a documentation page. Publishing a security.txt with Contact and Policy fields would make it machine-discoverable. - No published disclosure policy URL, safe-harbour statement, or response-time commitment.