generated: '2026-06-20'
method: searched
probe: true
source: >-
  https://www.webex.com/.well-known/security.txt (PGP-signed RFC 9116, canonical
  https://www.cisco.com/.well-known/security.txt). Webex vulnerability handling
  runs through the Cisco Product Security Incident Response Team (PSIRT).
policy:
  - https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html
contact:
  - mailto:psirt@cisco.com
encryption:
  - https://cscrdr.cloudapps.cisco.com/cscrdr/security/center/files/Cisco_PSIRT_PGP_Public_Key.asc
csaf:
  - https://www.cisco.com/.well-known/csaf/provider-metadata.json
security_advisories: https://sec.cloudapps.cisco.com/security/center/publicationListing.x
expires: '2027-01-01T00:00:00.000Z'
evidence:
  - {source: well-known/cisco-webex-security.txt, kind: security.txt}
  - {source: 'https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html', kind: policy}
notes: >-
  Cisco publishes machine-readable advisories via CSAF and maintains a formal
  PSIRT disclosure policy. No public bug-bounty (HackerOne/Bugcrowd/Intigriti)
  program was found for Webex; disclosures are handled directly by PSIRT.