generated: '2026-09-17'
method: searched
source: https://www.automationanywhere.com/legal/vulnerability-disclosure-policy
provider: Automation Anywhere
providerId: automation-anywhere
policy:
  url: https://www.automationanywhere.com/legal/vulnerability-disclosure-policy
  http_status: 200
  verified: '2026-09-17'
  name: Vulnerability Disclosure Policy
  linked_from: https://www.automationanywhere.com/trust-center
security_txt:
  served: false
  probes:
    - url: https://www.automationanywhere.com/.well-known/security.txt
      status: 404
    - url: https://ai-kb.automationanywhere.com/.well-known/security.txt
      status: 404
    - url: https://community.automationanywhere.com/.well-known/security.txt
      status: 404
    - url: https://apeople.automationanywhere.com/.well-known/security.txt
      status: 401
  note: >-
    A published disclosure policy exists but no RFC 9116 security.txt points at
    it from any host. Adding one is the cheapest fix available to this provider.
bug_bounty:
  program: null
  note: >-
    No HackerOne, Bugcrowd or Intigriti program was found for Automation
    Anywhere; disclosure runs through the policy page above.