generated: '2026-07-18'
method: searched
probe: false
source: https://www.bevy.com/b/security
policy:
- https://www.bevy.com/b/security
contact:
- security@bevy.com
notes: >-
  Bevy publishes a public security page stating an ISO/IEC 27001-certified ISMS
  and SOC 2 Type 2 attestation (available under NDA via the trust center), plus a
  dedicated security contact. No formal bug-bounty or numbered responsible-disclosure
  policy was found; report vulnerabilities to the security contact. An anonymous
  ethics/whistleblower hotline is also published.
anonymous_hotline: https://ansr.me/WbIu9
evidence:
- source: https://www.bevy.com/b/security
  kind: security-policy-page
  keywords:
  - security@bevy.com
  - iso 27001
  - soc 2