generated: '2026-08-19'
method: searched
source: https://www.cisco.com/.well-known/security.txt
x-evidence:
- fetched: '2026-08-19'
  url: https://www.cisco.com/.well-known/security.txt
  http_status: 200
- fetched: '2026-08-19'
  url: https://www.cisco.com/.well-known/csaf/provider-metadata.json
  http_status: 200
- fetched: '2026-08-19'
  url: https://tools.cisco.com/security/center/publicationListing.x
  http_status: 200
program: Cisco PSIRT (Product Security Incident Response Team)
security_txt:
  url: https://www.cisco.com/.well-known/security.txt
  served_at: cisco.com apex
  pgp_signed: true
  contact: mailto:psirt@cisco.com
  policy: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html
  encryption: https://cscrdr.cloudapps.cisco.com/cscrdr/security/center/files/Cisco_PSIRT_PGP_Public_Key.asc
  canonical: https://www.cisco.com/.well-known/security.txt
  expires: '2027-01-01T00:00:00.000Z'
  csaf: https://www.cisco.com/.well-known/csaf/provider-metadata.json
advisories: https://tools.cisco.com/security/center/publicationListing.x
bug_bounty:
  published: false
  note: Cisco runs a coordinated-disclosure program through PSIRT; no public HackerOne, Bugcrowd or Intigriti bounty
    program was found for Umbrella.
machine_readable_advisories:
  format: CSAF 2.0
  directory: https://www.cisco.com/.well-known/csaf/
note: Umbrella has no product-specific disclosure page; it is covered by the Cisco-wide PSIRT policy, which is one
  of the few vendor programs that publishes machine-readable CSAF advisories.