generated: '2026-07-18'
method: searched
probe: false
source: https://docs.border0.com/docs/security-policy
policy:
  - https://docs.border0.com/docs/security-policy
contact:
  - security@border0.com
response_sla: 48 hours
public_disclosure: coordinated
bug_bounty: null
note: Border0 publishes a responsible-disclosure Security Policy in its docs. Vulnerabilities
  are reported privately to security@border0.com (not via public GitHub issues); Border0
  acknowledges within 48 hours and coordinates a patch before public disclosure. No public
  bug-bounty program (HackerOne/Bugcrowd/Intigriti) was found, and /.well-known/security.txt
  returns 404.
evidence:
  - {source: https://docs.border0.com/docs/security-policy, kind: security-policy-page}