generated: '2026-08-13'
method: probed
probe: true
result: none
source: live HTTPS probes, 2026-08-13
note: >-
  AWeber publishes no vulnerability disclosure program that this pipeline could find. No
  security.txt on any host, no responsible-disclosure or /security page, and no listing on
  HackerOne or Bugcrowd. There is a published API contact (api@aweber.com) and general support,
  but neither is documented as a security-report channel. Recorded as a measured absence — NO
  Security or VulnerabilityDisclosure pointer is emitted in apis.yml, because the pointer would
  assert a program AWeber does not publish.
policy: []
contact: []
evidence:
  - {url: 'https://www.aweber.com/.well-known/security.txt', http_status: 404}
  - {url: 'https://api.aweber.com/.well-known/security.txt', http_status: 404}
  - {url: 'https://auth.aweber.com/.well-known/security.txt', http_status: 404}
  - {url: 'https://labs.aweber.com/.well-known/security.txt', http_status: 404}
  - {url: 'https://www.aweber.com/security', http_status: 404}
  - {url: 'https://www.aweber.com/responsible-disclosure', http_status: 404}
  - {url: 'https://www.aweber.com/security/responsible-disclosure', http_status: 404}
  - {url: 'https://hackerone.com/aweber', http_status: 404}
  - {url: 'https://bugcrowd.com/aweber', http_status: 404}
nearest_channels:
  - {name: API team, contact: 'api@aweber.com', source: 'https://api.aweber.com/', note: 'Documented for API feedback and questions, not for security reports.'}
  - {name: Customer Solutions, url: 'https://www.aweber.com/contact-us.htm'}