generated: '2026-07-18'
method: searched
probe: false
policy: []
contact:
- mailto:security@beautiful.ai
security_page: https://www.beautiful.ai/security
notes: >-
  No /.well-known/security.txt and no formal bug-bounty or responsible-disclosure
  page were found. A dedicated security incident contact (security@beautiful.ai)
  is published as the CAA iodef record for the beautiful.ai domain, and the
  security page documents an annual third-party audit, annual web-application
  penetration testing by independent specialists, and incident-response planning.
evidence:
- source: DNS CAA record (beautiful.ai)
  kind: caa-iodef
  detail: '0 iodef "mailto:security@beautiful.ai"'
- source: https://www.beautiful.ai/security
  kind: security-page
  detail: annual third-party audit + annual web-application penetration testing + incident response