generated: '2026-07-23'
method: searched
probe: true
source: https://www.capitalone.com/security.txt
policy:
- https://www.capitalone.com/digital/responsible-disclosure/
contact:
- responsibledisclosure@capitalone.com
program:
  type: responsible-disclosure
  platform: HackerOne
  submission: https://hackerone.com/555d8c87-becd-4083-9a2e-82cb78c7016c/embedded_submissions/new
  managed: true
  note: >-
    Capital One runs a HackerOne-managed responsible-disclosure / vulnerability
    reporting program. Reports are submitted through a HackerOne embedded
    submission form linked from the responsible-disclosure page; the program is
    not listed publicly at hackerone.com/capital_one.
preferred_languages:
- EN
security_txt_expires: '2025-12-14T05:00:00.000Z'
evidence:
- source: https://www.capitalone.com/security.txt
  kind: security.txt
  fields: [Policy, Contact, Expires, Preferred-Languages]
- source: https://www.capitalone.com/digital/responsible-disclosure/
  kind: disclosure-page
  keywords: [responsible disclosure, hackerone, vulnerability, scope, reward]